00080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3a2) [ 677.111382][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 677.255012][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 677.276967][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 677.286308][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.327676][T12143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.359317][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 677.370880][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 677.395011][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 677.409798][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 678.167961][T12143] usb 2-1: reset low-speed USB device number 40 using dummy_hcd [ 678.677798][T12166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:10:45 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:10:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@private=0xe0000000, @private, @dev}, 0xc) 14:10:45 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa00) 14:10:45 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:45 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3b8) [ 683.276795][ T5195] usb 2-1: USB disconnect, device number 40 14:10:45 executing program 0: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0xaed41) [ 683.448995][T12188] overlayfs: unrecognized mount option "{" or missing value 14:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x48, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a35}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf577}, @SEG6_ATTR_SECRET={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) [ 683.494858][T12191] overlayfs: unrecognized mount option "{" or missing value [ 683.583840][T12192] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:10:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, 0xd, 0xa, 0x301}, 0x14}}, 0x0) 14:10:46 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000000, 0x5}, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) [ 683.737657][ T5165] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 684.128154][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:10:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa38) 14:10:46 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3c6) [ 684.172469][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.272702][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 684.353058][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 684.424786][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.519471][T12184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.538181][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 684.589296][ T5165] hub: probe of 2-1:1.0 failed with error -5 [ 684.632354][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 684.643056][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol [ 685.328070][T12184] usb 2-1: reset low-speed USB device number 41 using dummy_hcd [ 685.469254][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.475602][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.838249][T12206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:10:52 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:10:52 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:52 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:52 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000000, 0x5}, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 14:10:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc00) 14:10:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3ca) [ 690.447161][ T5165] usb 2-1: USB disconnect, device number 41 [ 690.617818][T12230] overlayfs: unrecognized mount option "{" or missing value [ 690.659579][T12231] overlayfs: unrecognized mount option "{" or missing value [ 690.846839][ T5164] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 691.228036][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.248581][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 691.258115][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 691.268809][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 14:10:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3da) [ 691.278429][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.317190][T12226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:10:53 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc20) 14:10:53 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000000, 0x5}, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) [ 691.346893][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 691.406421][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 691.480766][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 691.520536][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 691.539690][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:10:54 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:54 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 691.907062][T12252] overlayfs: unrecognized mount option "{" or missing value [ 691.946105][T12253] overlayfs: unrecognized mount option "{" or missing value [ 692.177381][T12226] usb 2-1: reset low-speed USB device number 42 using dummy_hcd 14:10:54 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000000, 0x5}, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) [ 692.697113][T12242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.756819][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 692.763464][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 692.776811][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 692.783464][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 692.796814][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 692.803438][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 692.816810][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 692.823448][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 692.836804][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 692.843444][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes 14:10:59 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:10:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc24) 14:10:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3ec) 14:10:59 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:59 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:10:59 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x5ab8df4c, 0x1) [ 697.080609][ T5164] usb 2-1: USB disconnect, device number 42 14:10:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x1, 0x0) dup2(r0, r1) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="88", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x10}], 0x10}, 0x0) 14:10:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tcp_congestion(r0, &(0x7f00000000c0)='lp\x00', 0x3) 14:10:59 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "ea28d0d7164f18eea0383f1b581445ef70e6906d85a08df79d432826e9a5f5cfa0632d8a5cd2f00ab3422b21ed5f05193f664c417ce1449b31ca6b9491f2f8a3"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0xfffffffffffffffc) [ 697.385134][T12275] overlayfs: unrecognized mount option "{" or missing value 14:10:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891f, &(0x7f0000000100)={'gre0\x00', 0x0}) 14:10:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x41, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 697.676919][ T897] usb 2-1: new low-speed USB device number 43 using dummy_hcd 14:11:00 executing program 0: timer_create(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) [ 698.057798][ T897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.072470][ T897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 698.150979][ T897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 698.162022][ T897] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 698.171394][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.197904][T12281] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 698.218980][ T897] hub 2-1:1.0: bad descriptor, ignoring hub [ 698.224949][ T897] hub: probe of 2-1:1.0 failed with error -5 [ 698.253567][ T897] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 698.260127][ T897] cdc_wdm 2-1:1.0: Unknown control protocol [ 698.440009][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 699.008504][T12281] usb 2-1: reset low-speed USB device number 43 using dummy_hcd [ 699.518352][T12293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 699.858165][ T5168] usb 2-1: USB disconnect, device number 43 14:11:06 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fa) 14:11:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000700)=@framed={{0x69}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:11:06 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc25) 14:11:06 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:06 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:06 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 14:11:06 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x2}, 0x10) 14:11:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) [ 704.374199][T12320] overlayfs: unrecognized mount option "{" or missing value 14:11:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0xb, r0, 0x0) [ 704.567913][ T5164] usb 2-1: new low-speed USB device number 44 using dummy_hcd 14:11:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 14:11:07 executing program 0: sigaltstack(&(0x7f0000000000)={0x0, 0x1}, &(0x7f0000001180)={0x0}) [ 704.948187][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.031886][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 705.119442][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 705.185083][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 705.244104][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.308184][T12316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 705.353724][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 705.369946][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 705.416447][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 705.430895][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 705.564804][T12316] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.138327][T12316] usb 2-1: reset low-speed USB device number 44 using dummy_hcd [ 706.628081][T12331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 706.969799][ T5168] usb 2-1: USB disconnect, device number 44 14:11:09 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc29) 14:11:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x500) 14:11:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22}, 0x10) listen(r0, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) accept4(r0, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x37, &(0x7f00000022c0)={@local, @empty, @val, {@ipv4}}, 0x0) 14:11:09 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:09 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 707.656236][T12351] overlayfs: unrecognized mount option "{" or missing value [ 707.988286][ T5165] usb 2-1: new low-speed USB device number 45 using dummy_hcd 14:11:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5a) 14:11:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x600) [ 708.356946][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.386871][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 708.395907][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:11:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r3, 0x527, 0x2f98, 0x8}, 0x10) [ 708.406411][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 708.415864][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.467088][T12354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.508371][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 708.529142][ T5165] hub: probe of 2-1:1.0 failed with error -5 14:11:10 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 708.566457][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 708.575359][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol [ 708.712919][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:11:11 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:11 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0x1c}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="3573dfd3e1a70719", 0x8}, {&(0x7f0000000140)="ad946d5010ef647052c1bb0ffbadc9917682c2fd2b144fea6d7175c734a1f377e5f79c0ac02e436e536eaa222fff0b7c996561fcf4cc8fd847c0d799a1fc2eccacffd3df0d1002b85d571b5708e2c2fc470cef2e5b664c35b6609151679aab24f6b2b8b70ff05d0ca017e74bc07591333390cf69a80d9cc9ca8124b37ba457885f226468ce11ccaf7f264460c5321f091d37c830cc85d83c5ce258667f276497e471df7b62782402956c85ddbb2626f02c59c56c8222027690b582626e190c8c6d066643de13718c70e29f10db79717c6287d0bf8da38496629f0e2191e9cfbb8bf8a600001a6091a38f36bf1f34b8b426cc173790cf81492b2ef3e60f1a61f1cf1a0ef9ea38243aedb7fa3693d53ee02a86ea2abd92e4d34b64470b966ef2fe3a4ddcd18c1366838f9a45fa54a0d2e061c1a117a8c93ffd4d436d7fca04293a29d2fb12ee2f8d6291f6c771c31b37c050c5909da3d25df66b18a9e9185f5d4e2b026201e0b92cd397f66295bafda2e752b7f4014970b3f008f65cba27418de69ecd5e35a2f9c4779d38247c2025ad8689fddf322d42f1283fabf09524df7b2b526bad7905ca34be6e1c55b9512a0849e912216b7ff765a555dc1a31b794f38f88a61867b4bc7ca56a75b406f9e5541222c8540fb38e27da7e00c40ff592b23ce7b70d5f24754b81e6235896c2ad914cc2f97450e3e41c94b079a4779b5cdad0478ed21e845211c04f77558325aa7fe734498af1b2b24d8fd3d977a77f9fa78ae9ddca30978b9e123ca89242148b04e719898afa0efebb260537ec8347bc06ab4c05550d1dbbc0d3c9c2cf2a9121db714128d10447620e604339fee05e4073e554be16a08c0842b0b82727a497e2f0d4d1ee008e152fa399440cbd9737ad7487dfefc2b52f8dde075fb2188bba33bd264c00c9530232d20c3874d2c6784ef25a855cdded4330fa4e7f5a03f878e6dbc237419909e052ffea1fff6dbd54fc4ffefca2c9305cdd0305bd3c27daa749c7271f5810c074518547268f282fab506db435873022207f3ea700c2608a42149bcf73b0e8d9e4fdb1a7643f8ad8bd264476bda275d6c807e6b20036575f9dc14c062a0dfa544186c9a275d2dac39d3236ecee9b8d6804243ebd7273e95221f01c0911ba9d58d31c2201b24ac9232be44790e0bf898a146e8f5eb63cf70cb700712d77633de6dc9e05ec01bda8df45f212aa8c5022bb3d6c9dfb173e6f92b59d219e6b3fe8d43371dc8d14ff32be1389e02b21aebf8da27cb233348a071237098dd54880076a7e6e8b2c4acc32e28fe46de7f94812b8828f956303ffe596e1b00f421f15fa81bfa126666729441b57d63507c5994379c20c2597e0819527baf6e4a1b5f1a313a10fce0bfc19f74f1c352f66f47e8db3ba39c9237f4b0b485559d6f7b115ba5e6412a87d52f0588569bd3fee3b212aeda419bc20c3baf9db02c5702d88de0df5cd2dad3c8e1a680ef39151d5ad4274af11bd2c34172ad8d3a9f14559b442aa40f72cfebcbd3683dee4d32c03c11e1ac1cd1f9e08250be18bd0bd300a8954106c6f310340d75ab3926891d0b8bc4a82c139ee5f54645740cd8ac4d947f41642d46d8afc70d58ee6ee315c270a7b3670805fd2841835a74147491770fab4aca8cd8b5da2b76a210d4ecf3eb5d9db9e8d24253f4154ee19f6c3046b56af10cb4c5a1a90f0d99c01df43d65595640136b686890251df8d8ecedbfe47aa07f5c62858a866a66aa49e18ccd52e7dc39178a6d3a07f162dbe14a4b182da5c7c66bed190e68c4601975212849747b35b548f02fd8f5e6027d855e9d16c4580772fd42a0a3fa403db1f31774dd852c46cd0520f6ad2d1336a79b5f51057bbb9702dbe02e900970453c44059842417a57be1e564cbc035d3ff7f1ec1c5f380a3a0b4a9f8febf7fc70248afe39eb21533eeacfe2ad87456e303762eba5154b597fac5b79fc3480290d5263e1add00c0b0c7e3817f46f8ac486ee4bfe107df4d6638c5188e439d82d43663ffcb6d2c91a751ba3e37bd3c1bbb59f4622dc44f406c2d3c188469c32a2b431196f83cb61616e20032868ac7b88c08180c9395e0f7f301a3e90ae9f7659066dfc04de165df73ccb6b453cad45b99daf4abb050d66204c64398e224422cac60faf0f73496f0c155c4787753207bf04a007ce8f335a78ad3714e10c29fb6c4c7501c7140a7a24d4611734ded16643be45cb4593144bdf4795d7365b079a0dc3083700512458721aeeebb71bd22c9ba849fcf89aeddfb0e57909b43c8dd68b326f0d7a42b83336edec1de969c187b9f8bbc418be6642242bccdb9f3f8062193711ede3caee3a68b453d3a66b0807537a8ffff12c4cf451a64098dc27773f76805a5679ec6db0c512857e0da5b633b8bf941448b9b2b5c9b31a5caaaa7ef3f5b92b3a7f496551ff92878bfdabd58227f8f9a52648200905e0bf84207f415c3296297fefac5f208026f37136a6abc7b7ec60d200896f9d6d928795f82df27771204fb02fa7f8f8c3cdf65d0bd086484809a7af1b4fb9feca0d12111d391e410558d4be0c0bf49cb0b8b0927d59ac5f09552561ef8708752aa420c39ccf653bdcfdf8275812e60c28085f20346063090ce9b45272287eca104876dc04b584a69cb51d6b15320f6905763e79399d3273e908b7cd9a9117004aa9eb2ece9d6411b57bebc338e6338288e120edd23c6c93a8c0c2714ee94699c16b8034023664885c8fbe8598337dc75c0fc4a6e5882ac46f6e824662d91467ead06d14fde9adb2a3dd3a825e33db05e4b4730d0a31ffdd243d1c16ef8494bed1abfdf178223c0e8f7a6ceb5306543b058418d788900a05d310d217806da135840c888c65707ec90b2e1c5d88e3428a1279366b11cbffbe2d0066629c649bffcba79f7e93a803390c79231732d6b12b6cea003a79b9a4a71196d99df76a1b63cccaf751311cdff55567413a3005d4ffb1f60f76003a051ed97c48b33c658916488c41ed4288932dcf1c88b3c5cb878adf7c800e4136cd43ab3cbcebfa589c88163c8b1f7563889ec06e1a7ed1951b3bd4abb1100d9003b7c00b4731665d3202ca2ec86748d9d67a66a0f7d2c26331c8a4b057475fd4630030968cb72076032eacd51988d3636eb606ce7c0c891b0c5b45d6ee468ecf6167ab5f915340b485ff31b180124c8a940914461affd1cdbefd63357f945c80298f891f6a5e17900aa5e1562cf4feffcf70963d775bf3ee1e7648097a86222bb427789f4265174b991c4d3cc5e11580bfe567584ae5bbf1c69b8243238d2a792a2b32061e495f62dfb71c1c7e30a9cb15d73d3b06b94a568a9b9ab04c3df7dcd487e1b64951b3af934292399bf79402b1864f193c686b256e5cd44ed95dbdd8c0db3776bb94038fba5197f18d9d476f87d29c8ffac8e7eee54d30d6cf086911b291e3e5cff9f5ea1a45d0057f5ddf72dbd0a5c8329f544c695a1b294f0cd7bbe2d3541b0379fb413d52012b8c5bfcd47b0fb55e0191f93fef0894eb4e531615d747bebe9c069d902b56f53105bcd3e2d126d39712da4984471ee0629f525ea91e4cc9d6c769e928578068f37971dac118760f47a4f291856756b5b5fd028d29c42eef1873ea2518560946a52e787fdfde57f4b32190a8e2518dc0c039c013056de412836f2a6a50a0a84780449baf5677b9a59ee1715fa3ade53b34e3f6c0a3d0e8f80f428716fb8c1e98233cb1ae66a5efb5fe13d2450639b5bbc894adc383b0de86b58bc8dd072529f463bd7d05c101cd445a8dee6ab4bb273ba83c0756ec069969661df222f342b21828380015391708093510000fdad9cc3bef7b7f97e481a54cee7b6f04ed52b1d65d0691856ae9b1ffecded93582dc0cce9139dd92ca18263c7239fbfa85b805451ffac3b6aea497a5c93d6daba8dc0ff2b651135ce7aaa1321ad889377b97013db8d9e83c351384fdc1a999cd1af10c30c03ac9564dd1491c8bfec578a4a4043bcf3ed065ebdfcafd5b250d053163abd024fbad37e13789a7960672452ee1933f50e2765ab71e723a3d8340f8195e13edb714a12bd8d600c90ffcf9115a599f3b5829d2e6802477267f5b36753561d42812a96edd529e2e8ef8632b1dee1276e281b9ba3e83792836d19b37baa3a2b77d17e0e7e63fec43c362a3ed514a6bd733a9d8d5d26cc333c4602f6848bd8eed6254562fecf9c0f8ce4286d3bfa31d6bf5d7e71f72496ac0ce8956e694633a26f0bfaac47a56361138ab80d268ffd4640e5c3e713d1a9cb4a6374b11daefc2e8dc042863e57930988d75c33357b5eebc056214208628b8406974aa2cc590c5a22a8cb5a1942f18779ff14ba4dafa6d0237cd2c37adc14d96971e2de7f567bd38ef7a2244e64d239e798951b29d208868dcd5e1df9019180b10ca704ff68c3dd1f5dea3411f68f3e858f1976c795fa9b7175738ff72345ee5486e029e8e78b11f45386aa70cbabf039f9a59804ecb3ea889468b193ebbba92d1b0890c1d6f6be3471c51ccbf9c779bab960c05886b5bea37b1b3803e6de981d2b4e3f390ff2fa70c27909989a355cb4306e74653d4cc2700af06049682e976f6d214dbd9e958d9349a75aaa33327f1864a4233edb98d2e9abe3ca0857c238a7bc699eb871417101c3a53956d43a3f62ac4397e052d91db1104043d9cfc7139ddad85c30e21722a9b70e1ac1507de053ee4d3bf1a28529c0f311e4b1c7dd108546eca7137b7073b93619abef1c5e78a08d10a286dad6cf258ea4dd8f39ae4d967a6f6fd5b79307b2f2df93eb73aca4a15f943a7bb8d9d7b9acfc6ef7632fdf1a9f28b64876a5bda8742208f3d438d6b7137238b33228cecee7418d082dc75ac5eb4975eb1b2671edd74f3c30a76356228e822de3b0ef2ab342982ac73ce1ea1c93ee6f42ed68f39915c62ef69047eb291dfbdf55dfa8e6b0f260a8719ae1a7c3aae4d6c7bb5a8f439ba0de36724a1687f5a0d32b9fc603b6aee44a43e1c5b5ec311820cd78070fa467b9622d071cff6fd2fa3eb35f2fb5ab9e51025f2207778565a2c822b940b043f6733f1376df53f7c647135662b9d77f2729053e58fd8ac8e95db7812445f435bba058891529f19b3e54123711c2b0587c1e2c7d98e7a9db153e2e50830864906714e23422433625f2ada4eb34a2535ed335e7f677f8b33bec0161948712fc7f840715b0e9eba8df2e597666ef46c8397a379ce508ada1489af2f28f2e06b7c6700c8ff1db67aff35b067348f3a1b43f4bf5483ec1271563c9938196a78d0f889e76aa21577a6679360ab5043c89d9680da4bd513b7f9b720a46e3c6e0f09c3a369dd0731c8b1aa16942e9c27ba6e324ac4d34c9f11c7831908661a9225dfa757bcbaf440a5b806f4cf171a78236aa8bc0a0bc480ca0392abd12344da5599f7725a7e99d957fbca7f4d908056f7bb1ba3457bca7410e4fc1191305b2ecef4d202782d33870d715ef6d0c9b9319f72e9f1885a9b04b4ed0ad04dc0c847982c373feb57400b8d849551eac1f802aa1b974d1abeeb1fc36e010fd4fde8703564b0b6cedf73774574ca18927f30319b1d2ef9168b8dd8ef970efccd66df1d762ffff532627b844804e2e583c79cc65fd2b456a4d9bc99f28fd2963cbdc2bdbfb53a61edfe1bcea65c974f7030e39707e46bc840c6e0d50369505a2ec532ba9f9324d8a1597928a1236afe543fa15eeaebe837bc3a5fe3b775006ebdf2d04e9ec93bb73e97ddb2c483e07b4be6a11994d113d0da692ec25f477135dbc335f0f76d0bf51ee", 0x1000}, {&(0x7f0000001140)="f8ca57259d6714f68c0992d8ce19847f3d42668ccaa1c460febf4c5b128d2ff258964561ec3ea479efa5fc0471c6b5fe26c446078dd9149a299b95597ab3b0cd4abda3a843906cb42e2e61c5011597082f5daff8e6cfd8c1dae4b0e810bf6591502ea65811a64041dad67334722c4f34fe2035ff40a917480de78d90eaf2cd067f94ae43df0d7eb488bb7c1d7fa3bf", 0x8f}, {&(0x7f0000001200)="646d868dfcd5c98d925a4c82be0cd64ef0d708b610cd2f5927dc05d558b49da1b6765997964c6cfecbc39abc57f8f916c45f185342727233ad8527fb9f402c5ad0a1d7d2281ba6752e900bb58165ea6bac0c5f2721a69d2bdeb0bc283e0342ab089a3555119fa9d5afb4b8c8e9678c6ead1e12c06fe9e9dfde640e40d2cc2b6ad49e0963470492c63f2fa84236109adeaca8758d1d6a43226c9990dc7f4c6a8a26cbc3966001746421c7b4b6d0107e95113878355c4b44b45b3615c3c05107757bb5dd9136c553a65409ae9fab16c5d7528800ec3f5472951907a5b70173e01247b95dc493308efbfdf608ab9d264aed8d429ad3c20e76ad0013399b3e1bd72c998b5064860077fcba3191805b97e9437b118d07b79e8f3e5e3e49fe7ff4ece74b40b58fb967193ac515d33d49af013f2ade695cb1481f5c90347c774a5069e9e29acd0a2aa5727286d3acdf3f208f5ab30d1aa4372547ebdf7c2cd454aa6314ce77e88a031cf9434abe917913a4cdb6a20ca96fc58fe5655abb22c61920fd92109a713e6a691b366af4fca1cae403da5017981e52f6c3164102d5a67dae60a0ca8bd67a760afdfe9656166b09c78a723ee535d430ad12b272c85aa1dcc58892f2cd6cd744d31c040549cc6253b81b5e9b181cf187c2cfe67e2223331ee8592b631d2ac44d3e14bff02c95d4a95909257334f8013e82d68b006fbcbda9c3eb91f41b1caf6eebaa0c067bc7e96889d97ad4dc1cbc18b52ed9c1bb4728898bf5983b62e065c8918340266efdae90cf22933f5de7f6d1943e8c6f3741227148cf363e6b8780a5be2fadec7b274a7ec9e5182dc1a74bbeb261ee8f06776c7f2c7cf3c83a9a177901b3da462cffeae12bf853ebd62ef957327520204f94e92eb045832cfca43fbb328eb129f4777abf1337c1f229eeb4b0dd9dc8bc91ef9ce1f63fd37b27e9c03af96bf1a74db7570c67190dac29b3f7201336dcaf537e556f4b72930c733a4673d983c1662b904408683436b0058ddbc02db2fa68148a9f2f7f23effca47c63f51a890e1527645943b8c705d4d9aa472e906081588008152114e330f136ca5903b2e7f852b5258dce2758fcc96d5078fbb3a005421c3e883b6fff5430b16d52826c5c83e36f5bf23e4e6247213c4e1fba3b269c48cb26fe2270e16a4c9c217a2760903b8378e2de49bc355d78d93f4a8f1c6c2fc12516656655f67ea47e262e4b36ae1b1f2187d2046970f704554151b608401218902b7edecd124494a166e861706d3b36f38cde992ff0706296585587db8f1ee5a66cc1cb29fc1a5bbf331859224f239c68712ebc7051f2e196cb21e682e54b6ed3210c016f7be88495b3b7131957809a41cc91f93c01159fb5e200d6593fdd7c88f1a96506fa44d12143f745dc641cee64b654843259730795c3cf59b831cb11ebcee108a4589191ab5320522c8ff7d76fec11ddab862115260bfa0715645ac0ac56015256b94bc93545954b17b7a64f0f7e924056ce9a6d4ca3f5155152dba506a379da987ac6654c019b5dcffa17c8dda0cf582c96559e459d5ffdfeeb90ab3f368ca2354d2a789589ad36392872ab880f7fef40d0ca5bc13a3ee47a106fd7674a105ef902ab59e5bb0ae339486780163ebb4d016152a17b98377c9ffddd727716fe2669662fdce917fe14b7887b9a0cf0ea8bb04229dc030af2cbbb10df2a13d5f15b3964192c7bae45239a5c2b776dbd0238fac367beb38f0bea893a77cf2e2bfa423fc02e1243f59e33650a68d2f402b0bc9cc7ec6ebfd5f4d4e2a521aede00974bc306d59bf156fec8c4aad818c942da4921b105ba45a2733388083f4a56c45b5d503f9395506d7ed48ad7cb8550f15f69878c6950571106c3fe1220bad9aeae116346cb3ee9b0980f9e6068020a60e631a19d4e9f0f94302cbe515397d0f2c1e43c5c878c689ea112e4f63e46d0cd04b3fb311697c90d8461d63f6a8ee9104aefee94007cc813bdaa40fdf3df3259895fc04124e8a80576450ad59032a614612c2f6badeec2f6c0980ddb8055555660ba5bc6df091b33a61a80e749a1b0725740812fe7a7023256297ad63001b1e5d95acb30696f6dcd644e63ac74bba3eb9cd04b3e5808259bf07c58c4706a5c0cc42933b022c46a987c79c284f00f3eb6cedab9b622aba2d82f162406418a1f0cbd089cb6e76b66133c80ad1018ab3ad6444ac409369b6efdb68d8a08a38016e8be985f65de48785044d81368545476fa566564cc5d8b934f57e2271a0185712e33e06bd74e6001b80951406a7153d0ec688b8a322ff9f330e65cbcb628c284e2d06d6b5d72ad9763a5b7773fb6eb9cd2205b6d46fb4cdc5e599b197c8e7a0d7c51a1bd88024d1fbe280efd1ba3f982ac3321d987a670ea44624640219e6ed3766d8dc28409f38c21f3be839e86c08ce2f99507863f7492c969e042f392d2b0306297114c8aa8e24016d039eaae984bc243d25d778a4e2b78b19d96ca2d8afa5e399d319ddfd4a15d1790793537e8805a332d8f628c0cdb69ad34023e1efdff28417e1ce39226b594a3ea270330545f1068f66db6e2631aac36d7dcd98785683c0f3e0e2bc8e92a79e73fc801d8d1ab102afe598d77223d1684a9e27c3a495727b7f22c503a1d618723398748c8df860879f6e740723fb60081cefc18823b96ab358a3c8fed759c67636e65fb007f87e03f20acfef3c21b15372f8e42c407dcfc3ca7e8d796525de22158ae39376828bc8eb5e788c7ebfdb8cdc76e651ead5a69ddd5bf2826b6051a70219793b96f61955ba9ea491072912d34d8b4c2e4578d9095f4c61e1d0882172a401fad817ce3fb1f502c12c853bba0eb57ce2cc9e1f1d5210414825f3353a1bdbb7327fdd49f5c8b6809df8ba1ca61f5256bfa8b8c3fe0158ff46e6ca83f82832d1b4bdfcf6f5669c2ae038b94580bbe1ec15804e13a386b3327d62650307efa9a8351952b70040d5a7c6634ee841bf53f03396c34de703a5eae7b52e2bbba90462ed38b78ff250170a84ffbdcf5919e4840c8d2e8ec431116adceacd952f3802ede14c3bc12daf5fa94732b5b7253f5ee76087c176746789e868b476b1360ee4b98e3963a013261a07346632aa1b4c54972afbfa8975c9cf98c36e9c9a4060a0e31e0b9ee9ac3f46808ef221ae6eb772dd7c0563e513102c6065cf7a8d536e4ab176bad8029aeec023ac26afa66dbb244bdae278ff8359dddd92e5fe811e4aee87371264c8d25f6fa8bbbf34977b6e7fedd1296d04a0cea4ded12d218c3bd1f79c3f1bb176e38761d1533e3fe71a962c620ad1e90ffd2ee7a0e38ab6dd56edcf7086ff050a37e0bc9aab12451c8e11c9165b1db8f8aa9a23ef75c3ad54c9cab6f743a22ed8f129ec9c13a872e4c68ee92844cd08ba140a31d533b75b171997bc64c701d32f8543a7ecc8f31c68589ca5c07669a2cf9211804265c5d55d45993bdf04fda27289244d12cfead8582970ad0c7d22cee62b8258ef1ad63c4b2c5ee4c913b8e45b11153833aff759fc926d50627b41c4f9ad04d31f8f564be81495adc29d83fde1e9151afc5fa1f13bd0d6673eddb72897c6655d4dad115c8dd8834617df417504b87ea8466a11a5ca1dfac1d4d911f80b66bfbb622b271f864e8d77e919781f766a6b5d496fe856446f896d33ba74849a8042c3d3c333b65159ce98274a229018c1f221a8cd78b670dc0c5aa23d150e225c5821f4b0ae477f2869d90b862857bec1512ab1e83fd053642c1176900c761cea4a192382de3c7b0cf950ade641b40e20b025121dfcfcebd2fb73d1f5152576a64886154f2e062457f234ead9c910a31067b956a5a4be271ca9897f75d83b89762f0f24d7ee0684013de38a4534b2c136329cedeed8a5856510d2e1564237b89c2270052e6d8c8934954b41aeb712e298fcae1a52350d6127738d1e5a5f0a6249630d73a0d653373ab58fe57841674bcde07c81b3dfcb67da3d1a6103d9daface88077ba4f6abf63abeddefe0680b944aad303a544cd57e4dc15af3ee8d5d329686cbc318ea65a9b2ba3ad3fe92772f7940767ffa62ea241c8e0a6319b32223629fcfc48ebbf9d4cbca8381c4a1ede071cbf0eda3e545b2dd9847ba24f33d088d662ffbef19bc1c256bb84082417369944c2b6c51b2c55701396b6b7fcf41b12d085118acd4ca53c9927bfad10a1f5d5752d33137843a94362118900892c1cb4d44573f1a530977f1d390dd2194a12ca352cb22dd4ac2dd02ea5628474deed6cb7817d09539ffcf1d2175a9f32961cd0c441f48f84ad5e525ea65c1bb5176a4f4293f13e0279252fa5352920bfcc183968685cd5e792e8ca7d7c1fd18472782de16cf9767e02ae7c6cf063e29f824ec0006cba7630ef34e539b114921b561a8a91dccbf809034ea13eb93e887dc6f3657b1832b651a16467029e9188b173a4d94c69e138146f0c2b75295e9b48ec7da921ae639d6248607cf8daf6ca3bcad44902d2e2c14c37b94405581612244699763dabf9fd4355e2b9582af72c516ec03bc681feea018042f25a950a58e1fe813a35ea12e816345a6502444a90fef2c7ba5895783ef7f0362fe1f2c9ec85041831c67f63f6efaa67d94034a20d997b19b76cc865df119c5dfc663983c7a0b5c0f86f09a25cd9215c2ca80f37abf18a0180582595e670e6f2dd75ad53f8adbf4970cbd7fe4b89e5eaefc83c2c86a378647b2a5bb5dbb64fd2fba8b521731db085dc56af4ae601d758008a9a05c8061a0c11e700bea14ef9837e39edcc0003497fa9547282ee49df15c6d90f9ee47924ea8a9553523f1c841410c001f6159f252f82e015841e34cbedaffc1b3a9b38f799662a9869b20821ac0c6ad7d9fd4af50f7f1c0677278ea31b9559b596ffe8f77002e2fadd87a49ef00d5d0669e053c46554432d81a518a4c10bd301c6a68a0435aa373132fea8b380170e3b6094afdcfae37a6670b792531e10b45c95191f558cef93c63e5592b16dbd95c53cc725d0145d79238e800b660c70931cf080bbbcc7907e809370a97e5ef65368bc474de75f77ad8c380e2a192a54eeffaddc25c9741db63ec8a47c21640729d60e46d1b64399a7dc898a88e32001a10b3a95510a1c3d5dd4b99e85fdc92a17e43a385f22ead052db90434eac4be124950881176e99c23d45b185686f0fbbfb032f5eb0915e53f2f2283ad1054e928de0d27a88185211eed98b0320e347599f60fed91e87b899d2e50e99a23c07e5bd7f69f4536480a05ce7ff802bdd445a4e983e14c5dc5deb1a14b12e290805f2abee8f1a53f79db1be2466961424cf3734319d0f9208ad56589bcf9546093079f205059c5f8325fdb55d28bcee4b972468cb6eb960b9cbca9a8dc482aa746ac6e78cf18e35e50cdadf770d8f014e5867059d75d27e3df6fc7b9069aaa404e4613a9ef8ba3914a2b80d26ca30fe61490b47b8eb32e13efa3a9d1a34b74fe3fba43bcce3a8c1ea6daf620cbb9a26e5e0863a24d2db4a12038c46003192c0e22971394f8f2bc260a342f6e7c20029418ac18f778eb64161df64", 0xf5a}], 0x4}, 0x0) [ 708.821165][T12370] overlayfs: unrecognized mount option "{" or missing value [ 709.008739][T12378] overlayfs: unrecognized mount option "{" or missing value [ 709.348110][T12350] usb 2-1: reset low-speed USB device number 45 using dummy_hcd [ 709.827598][T12354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:11:16 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x700) 14:11:16 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) 14:11:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5b) 14:11:16 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:16 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 714.333402][ T5165] usb 2-1: USB disconnect, device number 45 14:11:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, &(0x7f0000000300)=[@prinfo={0x18}], 0x18}, 0x0) 14:11:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) [ 714.603394][T12386] overlayfs: unrecognized mount option "{" or missing value [ 714.613753][T12387] overlayfs: unrecognized mount option "{" or missing value 14:11:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 14:11:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 14:11:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 14:11:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) connect(r0, &(0x7f0000000840)=@in={0x2, 0x1}, 0xc) [ 715.007950][T10159] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 715.377194][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.393387][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 715.408521][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 715.435497][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 715.445402][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.487200][T12406] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 715.507647][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 715.519790][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 715.545199][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 715.561918][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 715.712416][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 716.299261][T12406] usb 2-1: reset low-speed USB device number 46 using dummy_hcd [ 716.787242][T12421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 717.128888][T10159] usb 2-1: USB disconnect, device number 46 14:11:23 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:23 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5c) 14:11:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x900) 14:11:23 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:23 executing program 0: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x1012, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:11:23 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:23 executing program 0: syz_emit_ethernet(0x12, &(0x7f0000000000)={@broadcast, @random="f894cc15385b"}, 0x0) [ 721.419512][T12446] overlayfs: unrecognized mount option "{" or missing value [ 721.456096][T12445] overlayfs: unrecognized mount option "{" or missing value 14:11:23 executing program 0: munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300)) [ 721.647056][T10159] usb 2-1: new low-speed USB device number 47 using dummy_hcd 14:11:24 executing program 0: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000001c0)='./file0\x00', 0x28140, 0x0) 14:11:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getown(r0, 0x5) 14:11:24 executing program 0: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x2, 0x8}) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x8, 0x2, 0x0, [{0x10000, 0x8001, 0x4, 0x7, 0x5, 0x0, 0x4, '\x00', 0x1c0}, {0x8, 0x101, 0x400, 0x0, 0x29, 0x7, 0x1, '\x00', 0xfffffffffffffbff}]}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000200)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xc400, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xffffffffffffffe0) io_uring_setup(0x29c5, &(0x7f00000002c0)={0x0, 0x1c74, 0x0, 0x3, 0x52ae}) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) 14:11:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa00) [ 722.057810][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.139825][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.241353][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 722.304174][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 722.347442][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.382405][T12441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.403719][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 722.423913][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 722.458946][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 722.479196][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 722.608625][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.202590][T12433] usb 2-1: reset low-speed USB device number 47 using dummy_hcd [ 723.697504][T12441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 724.037594][T10159] usb 2-1: USB disconnect, device number 47 14:11:26 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:26 executing program 0: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x2, 0x8}) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x8, 0x2, 0x0, [{0x10000, 0x8001, 0x4, 0x7, 0x5, 0x0, 0x4, '\x00', 0x1c0}, {0x8, 0x101, 0x400, 0x0, 0x29, 0x7, 0x1, '\x00', 0xfffffffffffffbff}]}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000200)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xc400, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xffffffffffffffe0) io_uring_setup(0x29c5, &(0x7f00000002c0)={0x0, 0x1c74, 0x0, 0x3, 0x52ae}) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) 14:11:26 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5d) 14:11:26 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:26 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa11) [ 724.744320][T12485] overlayfs: unrecognized mount option "{" or missing value 14:11:27 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) [ 724.785295][T12484] overlayfs: unrecognized mount option "{" or missing value 14:11:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, 0x0, 0x0) [ 725.068705][ T5165] usb 2-1: new low-speed USB device number 48 using dummy_hcd 14:11:27 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) 14:11:27 executing program 0: memfd_create(&(0x7f0000000040)='/dev/btrfs-control\x00', 0x0) 14:11:27 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5e) 14:11:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa12) [ 725.447618][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.493335][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 725.536872][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 725.554663][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 725.570236][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.617252][T12482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 725.638202][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 725.657192][ T5165] hub: probe of 2-1:1.0 failed with error -5 [ 725.689871][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 725.703540][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol [ 725.841281][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.447595][T12503] usb 2-1: reset low-speed USB device number 48 using dummy_hcd [ 726.998191][T12482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:11:33 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x0, 0xc}}) syz_open_dev$rtc(0x0, 0x5, 0x20000) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 14:11:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:33 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc5f) 14:11:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa13) 14:11:33 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:33 executing program 0: syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x200000) [ 731.562500][ T5165] usb 2-1: USB disconnect, device number 48 14:11:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, r0) [ 731.752571][T12530] overlayfs: unrecognized mount option "{" or missing value [ 731.791872][T12529] overlayfs: unrecognized mount option "{" or missing value 14:11:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, r0) [ 731.907418][ T5165] usb 2-1: new low-speed USB device number 49 using dummy_hcd 14:11:34 executing program 0: ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xc400, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)) io_uring_setup(0x29c5, &(0x7f00000002c0)={0x0, 0x1c74, 0x0, 0x3}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x800) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f00000005c0), 0x4, {0xa, 0x4e23, 0x0, @loopback, 0x4}}}, 0x38) 14:11:34 executing program 0: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000340)={0x1c, 0x7, 0x0, {0x13, '/dev/btrfs-control\x00'}}, 0x1c) write$P9_RSETATTR(r0, &(0x7f0000000540)={0x7}, 0x7) [ 732.268269][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.278596][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.288578][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:11:34 executing program 0: add_key$keyring(&(0x7f0000000580), 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 732.412390][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 732.496301][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.598199][T12515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:11:35 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc60) 14:11:35 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:35 executing program 0: syz_open_dev$radio(&(0x7f0000000680), 0x2, 0x2) 14:11:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa14) [ 732.638963][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 732.644930][ T5165] hub: probe of 2-1:1.0 failed with error -5 [ 732.659328][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 732.665841][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol [ 732.840942][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.865788][T12560] overlayfs: unrecognized mount option "{" or missing value [ 732.928118][T12558] overlayfs: unrecognized mount option "{" or missing value [ 733.468408][T12564] usb 2-1: reset low-speed USB device number 49 using dummy_hcd [ 733.977187][T12565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.318179][ T5195] usb 2-1: USB disconnect, device number 49 14:11:40 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:40 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc61) 14:11:40 executing program 0: mq_open(&(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0, &(0x7f0000000180)) 14:11:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa15) 14:11:40 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:40 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:40 executing program 0: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) pipe2$9p(&(0x7f0000000240), 0x0) 14:11:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) [ 738.739530][T12590] overlayfs: unrecognized mount option "{" or missing value [ 738.758547][T12593] overlayfs: unrecognized mount option "{" or missing value 14:11:41 executing program 0: syz_emit_ethernet(0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="f79a0e2bc255aaaaaaaaaaaa86dd60b3a6d300030000fe807071ed2d719739a85f3c999b000000000000000000aa"], 0x0) 14:11:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x525000, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000080)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000100)) r2 = mq_open(&(0x7f0000000140)='/dev/dsp\x00', 0x800, 0x40, &(0x7f0000000180)={0x9, 0x4, 0x9, 0x6582}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c40, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0x6, 0x0, 0x3, 0xc, 0x1, 0x9, 0x3, 0x110, 0xffffffffffffffff}}) r4 = syz_open_dev$rtc(&(0x7f0000000240), 0x5, 0x20000) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000280)={0xeb55, 0x3ff, 0xb32, 0x7, 0x3, 0x81, 0x1}) io_setup(0xa20e, &(0x7f00000002c0)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000300)="81bafe9ec8a748301d09a97f43570413aff44ae45b841f5b18c64738b18af03f8bf033c98d19b77f49d19dfc2b46c6bedbcc01b131a23fc95e130f25274e567bd7b7214a61e8ab34fb5da27e618da37681e1388c54bbf8d33440bc0452e9eb5a7806d97be7ad912f9053f18246dd492b38414cc2d49fa08f7b", 0x79, 0x10000, 0x0, 0x1}, &(0x7f00000003c0)) mq_notify(r2, &(0x7f0000000400)={0x0, 0x2d, 0x4}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000440)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000480), 0x490001, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000500)={0x0, 0x0, {0x1a, 0x1c, 0xb, 0x7, 0x8, 0x4, 0x6, 0x1d}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) clock_gettime(0x0, &(0x7f0000000740)) [ 738.937175][ T5195] usb 2-1: new low-speed USB device number 50 using dummy_hcd 14:11:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x525000, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000080)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000100)) r2 = mq_open(&(0x7f0000000140)='/dev/dsp\x00', 0x800, 0x40, &(0x7f0000000180)={0x9, 0x4, 0x9, 0x6582}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c40, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0x6, 0x0, 0x3, 0xc, 0x1, 0x9, 0x3, 0x110, 0xffffffffffffffff}}) r4 = syz_open_dev$rtc(&(0x7f0000000240), 0x5, 0x20000) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000280)={0xeb55, 0x3ff, 0xb32, 0x7, 0x3, 0x81, 0x1}) io_setup(0xa20e, &(0x7f00000002c0)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000300)="81bafe9ec8a748301d09a97f43570413aff44ae45b841f5b18c64738b18af03f8bf033c98d19b77f49d19dfc2b46c6bedbcc01b131a23fc95e130f25274e567bd7b7214a61e8ab34fb5da27e618da37681e1388c54bbf8d33440bc0452e9eb5a7806d97be7ad912f9053f18246dd492b38414cc2d49fa08f7b", 0x79, 0x10000, 0x0, 0x1}, &(0x7f00000003c0)) mq_notify(r2, &(0x7f0000000400)={0x0, 0x2d, 0x4}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000440)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000480), 0x490001, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000500)={0x0, 0x0, {0x1a, 0x1c, 0xb, 0x7, 0x8, 0x4, 0x6, 0x1d}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) clock_gettime(0x0, &(0x7f0000000740)) [ 739.328132][ T5195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.352184][ T5195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 739.408589][ T5195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:11:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa16) [ 739.517971][ T5195] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 739.565158][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.657926][T12582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 739.677619][ T5195] hub 2-1:1.0: bad descriptor, ignoring hub [ 739.694313][ T5195] hub: probe of 2-1:1.0 failed with error -5 [ 739.714441][ T5195] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 739.729925][ T5195] cdc_wdm 2-1:1.0: Unknown control protocol [ 739.889227][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.518099][T12609] usb 2-1: reset low-speed USB device number 50 using dummy_hcd [ 740.997146][T12582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 741.338872][T10159] usb 2-1: USB disconnect, device number 50 14:11:47 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:47 executing program 0: syz_open_dev$rtc(&(0x7f0000000200), 0x8, 0x4402) 14:11:47 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc62) 14:11:47 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:47 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:47 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa17) 14:11:47 executing program 0: io_setup(0x1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000140)) io_setup(0x800, &(0x7f0000000a40)) 14:11:48 executing program 0: io_setup(0x1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000140)=0x0) io_destroy(r0) [ 745.675248][T12636] overlayfs: unrecognized mount option "{" or missing value [ 745.743008][T12639] overlayfs: unrecognized mount option "{" or missing value 14:11:48 executing program 0: io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x1, &(0x7f0000000140)=0x0) io_destroy(r1) [ 745.938061][ T5168] usb 2-1: new low-speed USB device number 51 using dummy_hcd 14:11:48 executing program 0: syz_clone(0xa0002280, 0x0, 0x0, 0x0, 0x0, 0x0) 14:11:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, &(0x7f0000001180)={{}, 0x0, 0x0, @unused=[0x0, 0x1], @name="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"}) 14:11:48 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc63) [ 746.377538][ T5168] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.465059][ T5168] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 746.525036][ T5168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 746.573601][ T5168] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 746.629953][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.713752][T12633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.739685][ T5168] hub 2-1:1.0: bad descriptor, ignoring hub [ 746.766392][ T5168] hub: probe of 2-1:1.0 failed with error -5 [ 746.786265][ T5168] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 746.802810][ T5168] cdc_wdm 2-1:1.0: Unknown control protocol [ 746.918427][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.924770][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.968229][T12633] bond17 (uninitialized): Released all slaves [ 747.569723][T12633] usb 2-1: reset low-speed USB device number 51 using dummy_hcd [ 748.068224][T12653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:11:55 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:11:55 executing program 0: syz_clone(0x52001000, 0x0, 0x0, &(0x7f0000004800), 0x0, 0x0) 14:11:55 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa18) 14:11:55 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:55 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:55 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc64) [ 752.695835][ T6330] usb 2-1: USB disconnect, device number 51 14:11:55 executing program 0: renameat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00') 14:11:55 executing program 0: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 752.839122][T12678] overlayfs: unrecognized mount option "{" or missing value [ 752.854653][T12660] overlayfs: unrecognized mount option "{" or missing value 14:11:55 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:55 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./bus\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0) 14:11:55 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x67, 0x1, 0x0, 0x0, 0x0) [ 753.077412][ T6330] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 753.100289][T12683] overlayfs: unrecognized mount option "{" or missing value 14:11:55 executing program 0: fsopen(&(0x7f00000005c0)='gfs2meta\x00', 0x0) syz_clone3(&(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[0x0], 0x1}, 0x58) [ 753.479398][ T6330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.505618][ T6330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 753.515557][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 753.526116][ T6330] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 753.567658][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.597697][T12670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 753.618527][ T6330] hub 2-1:1.0: bad descriptor, ignoring hub [ 753.624492][ T6330] hub: probe of 2-1:1.0 failed with error -5 [ 753.632822][ T6330] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 753.639022][ T6330] cdc_wdm 2-1:1.0: Unknown control protocol [ 753.832183][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.437737][T12693] usb 2-1: reset low-speed USB device number 52 using dummy_hcd [ 754.948245][T12670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.298017][ T6330] usb 2-1: USB disconnect, device number 52 14:12:01 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:01 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/user\x00') 14:12:01 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:01 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc65) 14:12:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa19) 14:12:01 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000cd8000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:12:01 executing program 0: io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_op], 0x1) io_setup(0x0, &(0x7f00000000c0)) [ 759.561305][T12702] overlayfs: unrecognized mount option "{" or missing value 14:12:02 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0xe3fa9823d3f9dce2}) [ 759.671263][T12718] overlayfs: unrecognized mount option "{" or missing value 14:12:02 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x2, 0x1, 0x0, 0x0, 0x0) [ 759.777279][T10159] usb 2-1: new low-speed USB device number 53 using dummy_hcd 14:12:02 executing program 0: get_mempolicy(0x0, &(0x7f00000000c0), 0x965, &(0x7f0000ffa000/0x3000)=nil, 0x4) 14:12:02 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 759.986546][T12727] overlayfs: unrecognized mount option "{" or missing value [ 760.157573][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.177893][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 760.187856][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 760.198458][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 760.208216][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.239882][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 760.258509][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 760.292836][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 760.360570][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 760.371314][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 760.470332][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 761.107960][T12733] usb 2-1: reset low-speed USB device number 53 using dummy_hcd [ 761.587209][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1a) 14:12:08 executing program 0: setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:12:08 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc66) 14:12:08 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:08 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:08 executing program 0: r0 = epoll_create(0x200) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000e40)) [ 766.234838][ T5168] usb 2-1: USB disconnect, device number 53 14:12:08 executing program 0: ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) [ 766.367816][T12740] overlayfs: unrecognized mount option "{" or missing value 14:12:08 executing program 0: clock_gettime(0x5, &(0x7f00000001c0)) 14:12:08 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 766.502875][T12759] overlayfs: unrecognized mount option "{" or missing value [ 766.582670][T12759] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:12:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 766.625399][T12766] overlayfs: unrecognized mount option "{" or missing value 14:12:09 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) [ 766.716924][ T6330] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 767.108610][ T6330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.132396][ T6330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 767.151230][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 767.162638][ T6330] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 767.172324][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.207908][T12760] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 767.228363][ T6330] hub 2-1:1.0: bad descriptor, ignoring hub [ 767.241273][ T6330] hub: probe of 2-1:1.0 failed with error -5 [ 767.273139][ T6330] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 767.279599][ T6330] cdc_wdm 2-1:1.0: Unknown control protocol [ 767.434291][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 768.068372][T12760] usb 2-1: reset low-speed USB device number 54 using dummy_hcd [ 768.578108][T12745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 768.918085][ T5164] usb 2-1: USB disconnect, device number 54 14:12:15 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:15 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB='!'], 0x20}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 14:12:15 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc67) 14:12:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1b) 14:12:15 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 773.114404][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:12:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) openat(r1, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc514f15) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) pipe2(&(0x7f0000000100), 0x80000) [ 773.268037][T12786] overlayfs: unrecognized mount option "{" or missing value [ 773.287619][T12798] overlayfs: unrecognized mount option "{" or missing value 14:12:15 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 773.566896][T10159] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 773.586346][T12802] overlayfs: unrecognized mount option "{" or missing value 14:12:16 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc68) 14:12:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1c) [ 773.898977][T12806] overlayfs: unrecognized mount option "{" or missing value [ 773.936886][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.031979][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:12:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) openat(r1, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc514f15) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) pipe2(&(0x7f0000000100), 0x80000) [ 774.097584][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 774.164072][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 774.197689][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.257938][T12791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.278408][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 774.287322][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 774.356556][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 774.376979][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 774.491711][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.550702][T12791] bond17 (uninitialized): Released all slaves [ 775.109567][T12820] usb 2-1: reset low-speed USB device number 55 using dummy_hcd [ 775.597378][T12791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 775.938425][ T6330] usb 2-1: USB disconnect, device number 55 14:12:22 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:22 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:22 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:22 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc69) 14:12:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1d) 14:12:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xef, 0x0, 0x0, 0x0, 0x0, 0x3ca}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="a36debb23212f9adeb2b0000000000cf8adeb376abfa1abbbc00000000", @ANYBLOB="ca55445908254a7bc62fcf00bfea27d74e1cdc4a8f5724fd5a6c", @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES32=r1], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, @private1, @mcast1, 0x8000, 0x80, 0x8001, 0x3403}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x20000000802, 0x0) [ 780.155793][T12825] overlayfs: unrecognized mount option "{" or missing value [ 780.279915][T12846] overlayfs: unrecognized mount option "{" or missing value 14:12:22 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 780.396976][ T5165] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 780.563245][T12850] overlayfs: unrecognized mount option "{" or missing value [ 780.777349][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.832200][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:12:23 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xe00) 14:12:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1e) [ 780.973196][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 781.033232][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 781.083549][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.107559][T12837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:23 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 781.169329][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 781.175294][ T5165] hub: probe of 2-1:1.0 failed with error -5 [ 781.189020][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 781.195430][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol 14:12:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xef, 0x0, 0x0, 0x0, 0x0, 0x3ca}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="a36debb23212f9adeb2b0000000000cf8adeb376abfa1abbbc00000000", @ANYBLOB="ca55445908254a7bc62fcf00bfea27d74e1cdc4a8f5724fd5a6c", @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES32=r1], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, @private1, @mcast1, 0x8000, 0x80, 0x8001, 0x3403}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x20000000802, 0x0) [ 781.375482][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.587610][ T5177] usb 2-1: USB disconnect, device number 56 14:12:24 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 781.807843][T12909] overlayfs: unrecognized mount option "{" or missing value [ 782.187353][ T5195] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 782.511624][T12939] overlayfs: unrecognized mount option "{" or missing value [ 782.608195][ T5195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.645454][ T5195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 782.773992][ T5195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:12:25 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa1f) 14:12:25 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xe2b) 14:12:25 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8b", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) sendto$inet6(r0, &(0x7f0000000400)='f', 0x1, 0x0, 0x0, 0x0) [ 783.261034][ T5195] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 783.414716][T13012] overlayfs: unrecognized mount option "{" or missing value [ 783.466016][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.707126][ T5195] usb 2-1: can't set config #1, error -71 14:12:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8b", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) sendto$inet6(r0, &(0x7f0000000400)='f', 0x1, 0x0, 0x0, 0x0) [ 783.884333][ T5195] usb 2-1: USB disconnect, device number 57 14:12:26 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:26 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf00) 14:12:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa4f) 14:12:26 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 14:12:26 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 784.170019][T13023] overlayfs: unrecognized mount option "{" or missing value [ 784.387000][ T5195] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 784.432261][T13041] overlayfs: unrecognized mount option "{" or missing value [ 784.767032][ T5195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.784355][ T5195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 784.808171][ T5195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 784.833873][ T5195] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 784.859539][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.907347][T13009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 784.927694][ T5195] hub 2-1:1.0: bad descriptor, ignoring hub [ 784.936605][ T5195] hub: probe of 2-1:1.0 failed with error -5 [ 784.960345][ T5195] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 784.975212][ T5195] cdc_wdm 2-1:1.0: Unknown control protocol [ 785.135058][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.767386][T13043] usb 2-1: reset low-speed USB device number 58 using dummy_hcd [ 786.247155][T13009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:28 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x36, 0x1a, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000002380), 0x7ff, r1}, 0x38) 14:12:28 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfb8) 14:12:28 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:28 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa53) 14:12:28 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 786.609975][ T7] usb 2-1: USB disconnect, device number 58 [ 786.667593][T13049] overlayfs: unrecognized mount option "{" or missing value 14:12:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) [ 786.853547][T13062] overlayfs: unrecognized mount option "{" or missing value 14:12:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8912, &(0x7f0000000000)) 14:12:29 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0xc0189436, &(0x7f0000000000)) 14:12:29 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 787.037473][ T7] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 787.169004][T13068] overlayfs: unrecognized mount option "{" or missing value 14:12:29 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x120000}, 0x20) 14:12:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa54) [ 787.408134][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.441482][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 787.540167][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 787.556370][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 787.565845][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.628201][T13055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 787.649219][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 787.655186][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 787.665930][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 787.673137][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 787.853550][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 788.488380][T13081] usb 2-1: reset low-speed USB device number 59 using dummy_hcd [ 788.977733][T13055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:35 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:35 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1151) 14:12:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x2}]}, 0x1c}}, 0x0) 14:12:35 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa5a) [ 793.493252][ T5177] usb 2-1: USB disconnect, device number 59 14:12:35 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'veth0\x00'}}, 0x1e) [ 793.538930][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:12:35 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'veth0\x00'}}, 0x1e) [ 793.619297][T13089] overlayfs: unrecognized mount option "{" or missing value 14:12:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x200}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 14:12:36 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 793.671720][T13106] overlayfs: unrecognized mount option "{" or missing value 14:12:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000f40)={&(0x7f0000000240)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@prinfo={0x14}], 0x14}, 0x0) 14:12:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 793.825043][T13112] overlayfs: unrecognized mount option "{" or missing value [ 793.997929][ T5177] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 794.366971][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.421362][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 794.446681][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 794.469957][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 794.490049][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.527617][T13101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 794.548327][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 794.555175][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 794.588163][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 794.598764][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 794.759762][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 795.377186][T13121] usb 2-1: reset low-speed USB device number 60 using dummy_hcd [ 795.857966][T13101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:42 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:42 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:42 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, 0x0) 14:12:42 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1200) 14:12:42 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb10) 14:12:42 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 800.276602][T10159] usb 2-1: USB disconnect, device number 60 14:12:42 executing program 0: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) [ 800.476161][T13145] overlayfs: unrecognized mount option "{" or missing value 14:12:42 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 14:12:43 executing program 0: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x1, "b0142c9a7af9931d832e17212c1952aac6c2c6e9ea83cca33f46aa67cb227d1d", 0x24, 0x0, 0x40}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@mcast2, @remote}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x8845) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x5, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x1, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200040, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) socket(0xa, 0x0, 0x493f) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:12:43 executing program 0: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x1, "b0142c9a7af9931d832e17212c1952aac6c2c6e9ea83cca33f46aa67cb227d1d", 0x24, 0x0, 0x40}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@mcast2, @remote}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x8845) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x5, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x1, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200040, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) socket(0xa, 0x0, 0x493f) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 800.786805][ T5177] usb 2-1: new low-speed USB device number 61 using dummy_hcd 14:12:43 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001800), 0x42601, 0x0) 14:12:43 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc00) [ 801.177580][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.258034][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 801.294893][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 801.337830][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 801.358159][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.408093][T13142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 801.429195][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 801.436423][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 801.462238][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 801.472301][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 801.639235][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.279431][T13162] usb 2-1: reset low-speed USB device number 61 using dummy_hcd [ 802.777715][T13142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:12:49 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:49 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:49 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xe00) 14:12:49 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1226) 14:12:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dvb_usb', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 14:12:49 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 807.333122][T10159] usb 2-1: USB disconnect, device number 61 14:12:49 executing program 0: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x1, "b0142c9a7af9931d832e17212c1952aac6c2c6e9ea83cca33f46aa67cb227d1d", 0x24, 0x9, 0x40, 0x200}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@mcast2, @remote}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x8845) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000300)={0x0, 0x8, 0x5, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x78000000, @vifc_lcl_ifindex, @multicast2}, 0x10) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x200040, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x401, 0x3, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x7}, 0x48) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000700)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x200, 0x3f, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x0, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@ssrr={0x89, 0x1f, 0xe4, [@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x8004) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000940)={0x1, 0x8, 0x6, 0x4, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) [ 807.524578][T13189] overlayfs: unrecognized mount option "{" or missing value [ 807.614837][T13191] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:12:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000004a40), &(0x7f0000004a80)=0x18) 14:12:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000500)={0x31}) [ 807.806804][ T5177] usb 2-1: new low-speed USB device number 62 using dummy_hcd 14:12:50 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000640), 0x42500, 0x0) 14:12:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/module/pvrusb2', 0x208881, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 14:12:50 executing program 0: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}) [ 808.197724][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.212441][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 808.221915][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 808.231938][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 808.241144][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.288721][T13177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 808.308782][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 808.327287][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 808.335339][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 808.343275][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 808.350046][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.357022][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.524748][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.175427][T13204] usb 2-1: reset low-speed USB device number 62 using dummy_hcd [ 809.687716][T13177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 810.038152][ T5164] usb 2-1: USB disconnect, device number 62 14:12:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf00) 14:12:56 executing program 0: setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 14:12:56 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1227) 14:12:56 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:56 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:12:56 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:56 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 14:12:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:12:56 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 814.413804][T13232] overlayfs: unrecognized mount option "{" or missing value 14:12:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5460, 0x0) 14:12:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc000) [ 814.657603][ T5195] usb 2-1: new low-speed USB device number 63 using dummy_hcd 14:12:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {0xd, 0x4}]}]}}, &(0x7f00000031c0)=""/250, 0x36, 0xfa, 0x1}, 0x20) 14:12:57 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf10) 14:12:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000000)) [ 815.026945][ T5195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.037845][ T5195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.046850][ T5195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 815.056856][ T5195] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 815.068046][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:12:57 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x15b6) [ 815.147881][T13231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 815.168606][ T5195] hub 2-1:1.0: bad descriptor, ignoring hub [ 815.223527][ T5195] hub: probe of 2-1:1.0 failed with error -5 14:12:57 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 815.286583][ T5195] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 815.312470][ T5195] cdc_wdm 2-1:1.0: Unknown control protocol [ 815.372276][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.469614][T13221] bond17 (uninitialized): Released all slaves [ 816.091833][T13231] usb 2-1: reset low-speed USB device number 63 using dummy_hcd [ 816.618209][T13221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:13:03 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:03 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000037c0)={0x1e, 0x1, &(0x7f0000003500)=@raw=[@call], &(0x7f0000003540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:13:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfb8) 14:13:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1f00) 14:13:03 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 821.283472][ T5164] usb 2-1: USB disconnect, device number 63 14:13:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x34, 0x66, 0x1, 0x0, 0x0, {}, [{0x8}, {0x8}]}, 0x34}}, 0x0) 14:13:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x5421, &(0x7f0000000000)={'tunl0\x00', 0x0}) [ 821.492175][T13281] overlayfs: unrecognized mount option "{" or missing value 14:13:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x0, r2}) 14:13:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x0, r2}) [ 821.677884][ T5164] usb 2-1: new low-speed USB device number 64 using dummy_hcd 14:13:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x0, r2}) 14:13:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x0, r2}) [ 822.037729][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.082229][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 822.141629][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 822.187285][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 822.196563][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.227928][T13270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 822.248201][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 822.254116][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 822.279002][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 822.285149][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 822.464592][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 823.097876][T13297] usb 2-1: reset low-speed USB device number 64 using dummy_hcd [ 823.577328][T13270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 823.918386][ T5164] usb 2-1: USB disconnect, device number 64 14:13:10 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2000) 14:13:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xff6) 14:13:10 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="ff5606653a540f1c3b74f55b19692b", 0xf}, {0x0}, {&(0x7f00000001c0)="ae", 0x1}], 0x3, &(0x7f0000000480)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 14:13:10 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:10 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 14:13:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1600bd74, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) [ 828.171974][T13318] overlayfs: unrecognized mount option "{" or missing value 14:13:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000200)) 14:13:10 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x38, 0x0) [ 828.407546][ T5159] usb 2-1: new low-speed USB device number 65 using dummy_hcd 14:13:10 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) 14:13:11 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x38}, 0x10) [ 828.797605][ T5159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.846908][ T5159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.879470][ T5159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 828.892611][ T5159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 828.949804][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.037508][T13313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 829.061103][ T5159] hub 2-1:1.0: bad descriptor, ignoring hub [ 829.095568][ T5159] hub: probe of 2-1:1.0 failed with error -5 [ 829.115301][ T5159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 829.124500][ T5159] cdc_wdm 2-1:1.0: Unknown control protocol [ 829.271973][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 829.897948][T13337] usb 2-1: reset low-speed USB device number 65 using dummy_hcd [ 830.407734][T13313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:13:17 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:17 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x200c) 14:13:17 executing program 0: syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000280), 0x0, 0x0, {0x2a}, &(0x7f0000000740)=""/48, 0x30, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x1}, 0x58) 14:13:17 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x100b) 14:13:17 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:17 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 834.809451][ T5159] usb 2-1: USB disconnect, device number 65 14:13:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast1, @private2, @dev, 0x0, 0x3ff}) 14:13:17 executing program 0: bpf$MAP_CREATE(0x11, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 835.051073][T13347] overlayfs: unrecognized mount option "{" or missing value [ 835.090416][T13346] overlayfs: unrecognized mount option "{" or missing value 14:13:17 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={0xffffffffffffffff, 0x15, 0x0, 0x0, 0x0}, 0x20) 14:13:17 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001f00)={&(0x7f0000001e00), 0xc, &(0x7f0000001ec0)={0x0}}, 0x0) [ 835.277368][T10159] usb 2-1: new low-speed USB device number 66 using dummy_hcd 14:13:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) 14:13:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 835.668017][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.721056][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.802618][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 835.871067][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 835.933897][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.038059][T13351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 836.058236][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 836.069566][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 836.093037][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 836.108587][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 836.270449][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 836.908582][T13374] usb 2-1: reset low-speed USB device number 66 using dummy_hcd [ 837.397120][T13351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 837.737593][ T5164] usb 2-1: USB disconnect, device number 66 14:13:24 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:24 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2400) 14:13:24 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010000000000000000000800010000000000090002"], 0x24}}, 0x0) 14:13:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x100f) 14:13:24 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:24 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:24 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x25, 0x0) [ 842.080609][T13396] overlayfs: unrecognized mount option "{" or missing value [ 842.128479][T13398] overlayfs: unrecognized mount option "{" or missing value 14:13:24 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 14:13:24 executing program 0: syz_io_uring_setup(0x5d63, &(0x7f0000000100)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 14:13:24 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x101) syz_io_uring_setup(0x2bff, &(0x7f0000000040)={0x0, 0xbd62, 0x800}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x4c74, &(0x7f0000000300)={0x0, 0xb03e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) [ 842.417881][ T5164] usb 2-1: new low-speed USB device number 67 using dummy_hcd 14:13:24 executing program 0: syz_clone(0xe2082000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000240), 0x0) 14:13:25 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x240c) [ 842.787282][ T5164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.797761][ T5164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 842.808330][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 842.965927][ T5164] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 843.049077][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.147448][T13399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 843.188118][ T5164] hub 2-1:1.0: bad descriptor, ignoring hub [ 843.233234][ T5164] hub: probe of 2-1:1.0 failed with error -5 [ 843.267487][ T5164] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 843.273508][ T5164] cdc_wdm 2-1:1.0: Unknown control protocol [ 843.412925][T13395] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 843.988424][T13395] usb 2-1: reset low-speed USB device number 67 using dummy_hcd [ 844.467244][T13399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 844.818022][ T5168] usb 2-1: USB disconnect, device number 67 14:13:31 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1010) 14:13:31 executing program 0: syz_clone(0xe2082000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000240), 0x0) 14:13:31 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:31 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:31 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x250c) [ 849.289440][T13436] overlayfs: unrecognized mount option "{" or missing value [ 849.321822][T13437] overlayfs: unrecognized mount option "{" or missing value [ 849.637240][ T7] usb 2-1: new low-speed USB device number 68 using dummy_hcd 14:13:32 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:13:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2612) 14:13:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x110a) 14:13:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) [ 850.047603][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:13:32 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', 0x0}) [ 850.092059][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 850.218882][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 850.285562][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 850.295188][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.317785][T13438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:13:32 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 850.358390][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 850.364359][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 850.429455][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 850.435677][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 850.584632][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.635871][T13459] overlayfs: missing 'lowerdir' [ 851.208288][T13433] usb 2-1: reset low-speed USB device number 68 using dummy_hcd [ 851.737603][T13438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:13:38 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:38 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:38 executing program 0: prctl$PR_SET_VMA(0x2, 0x20000000, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 14:13:38 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2712) 14:13:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1151) 14:13:38 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, 0x0, 0x0) [ 856.379547][ T7] usb 2-1: USB disconnect, device number 68 14:13:38 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x2a) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xfffffffffffffe9c) [ 856.570159][T13482] overlayfs: missing 'lowerdir' [ 856.590208][T13486] overlayfs: unrecognized mount option "{" or missing value [ 856.619826][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 856.868231][ T5177] usb 2-1: new low-speed USB device number 69 using dummy_hcd 14:13:39 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x290c) 14:13:39 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1200) [ 857.287615][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:13:39 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 857.360353][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:13:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 857.410439][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 857.421417][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 857.437259][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.547206][T13481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 857.568633][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 857.583551][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 857.662109][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 857.682800][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 857.695423][T13506] overlayfs: missing 'lowerdir' [ 857.782163][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 857.937695][ T5161] usb 2-1: USB disconnect, device number 69 [ 858.287646][ T5161] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 858.656949][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.672353][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 858.682074][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 858.692384][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 858.701828][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.742610][T13481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 858.758517][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 858.764470][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 858.777865][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 858.783890][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol [ 859.097982][ T5177] usb 2-1: USB disconnect, device number 70 14:13:41 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 14:13:41 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x120a) 14:13:41 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2b0e) 14:13:41 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:41 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000140)={@random="e7624f035e5d", @broadcast, @val, {@ipv6}}, 0x0) 14:13:42 executing program 0: shmat(0x0, &(0x7f00002dc000/0x3000)=nil, 0x6000) [ 859.691116][T13526] overlayfs: missing 'lowerdir' [ 859.740481][T13535] overlayfs: unrecognized mount option "{" or missing value 14:13:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) 14:13:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7dad97553f25"}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) [ 859.956799][ T7] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 860.016201][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 860.347843][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.367470][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 860.376461][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:13:42 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3000) [ 860.401655][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 860.422713][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.447612][T13527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 860.508751][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 860.514746][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 860.563163][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 860.570364][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 861.278574][T13527] usb 2-1: reset low-speed USB device number 71 using dummy_hcd [ 861.778128][T13550] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:13:48 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:48 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1226) 14:13:48 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:13:48 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3801) [ 866.309506][ T26] usb 2-1: USB disconnect, device number 71 14:13:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 866.559628][T13581] overlayfs: unrecognized mount option "{" or missing value [ 866.568077][T13577] overlayfs: missing 'lowerdir' 14:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 866.676792][ T26] usb 2-1: new low-speed USB device number 72 using dummy_hcd 14:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) 14:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) [ 867.058425][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.068942][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 867.078938][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:13:49 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1227) 14:13:49 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x380a) [ 867.156802][ T26] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 867.166151][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.237121][T13565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 867.257914][ T26] hub 2-1:1.0: bad descriptor, ignoring hub [ 867.264650][ T26] hub: probe of 2-1:1.0 failed with error -5 [ 867.289312][ T26] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 867.311690][ T26] cdc_wdm 2-1:1.0: Unknown control protocol [ 868.028028][T13565] usb 2-1: reset low-speed USB device number 72 using dummy_hcd [ 868.587710][T13604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.938017][ T6330] usb 2-1: USB disconnect, device number 72 [ 869.788261][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.794600][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 14:13:55 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:13:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) 14:13:55 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:55 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:55 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3c00) 14:13:55 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x130a) [ 873.414003][T13633] overlayfs: missing 'lowerdir' 14:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r0}) [ 873.451432][T13616] overlayfs: unrecognized mount option "{" or missing value 14:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r0}) 14:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r0}) [ 873.617863][T10159] usb 2-1: new low-speed USB device number 73 using dummy_hcd 14:13:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) 14:13:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) 14:13:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) [ 873.987275][T10159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.047283][T10159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 874.066238][T10159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 874.117278][T10159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 874.126438][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.157150][T13623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 874.222267][T10159] hub 2-1:1.0: bad descriptor, ignoring hub [ 874.235835][T10159] hub: probe of 2-1:1.0 failed with error -5 [ 874.277189][T10159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 874.294280][T10159] cdc_wdm 2-1:1.0: Unknown control protocol [ 875.017755][T13623] usb 2-1: reset low-speed USB device number 73 using dummy_hcd [ 875.517908][T13646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 875.858074][ T5161] usb 2-1: USB disconnect, device number 73 14:14:02 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f00) 14:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:14:02 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x140a) 14:14:02 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:02 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:02 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:14:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) 14:14:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) [ 880.212522][T13676] overlayfs: unrecognized mount option "{" or missing value [ 880.220762][T13674] overlayfs: missing 'lowerdir' 14:14:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) 14:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 880.518894][ T5161] usb 2-1: new low-speed USB device number 74 using dummy_hcd 14:14:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4000) 14:14:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:14:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x150a) [ 880.927530][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.954460][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 880.974842][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 880.994385][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 881.014428][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.078028][T13671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 881.098621][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 881.118193][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 881.139212][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 881.147680][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol 14:14:03 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 881.426211][T13701] overlayfs: unrecognized mount option "{" or missing value [ 881.888425][T13666] usb 2-1: reset low-speed USB device number 74 using dummy_hcd [ 882.428265][T13671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:14:09 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:14:09 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x408a) 14:14:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1576) 14:14:09 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 887.099950][ T6330] usb 2-1: USB disconnect, device number 74 14:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) [ 887.261534][T13727] overlayfs: missing 'lowerdir' [ 887.291968][T13725] overlayfs: unrecognized mount option "{" or missing value 14:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) [ 887.597208][ T5161] usb 2-1: new low-speed USB device number 75 using dummy_hcd 14:14:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) 14:14:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4800) 14:14:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1603) 14:14:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) [ 887.967864][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.060009][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 888.124273][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 888.156599][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 888.238525][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.338702][T13722] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 888.359194][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 888.365144][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 888.409242][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 888.415485][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol [ 889.167775][T13722] usb 2-1: reset low-speed USB device number 75 using dummy_hcd [ 889.667312][T13754] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 890.007992][ T6330] usb 2-1: USB disconnect, device number 75 14:14:16 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:16 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:16 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 14:14:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4a00) 14:14:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x160a) 14:14:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) [ 894.282925][T13781] overlayfs: unrecognized mount option "{" or missing value [ 894.344111][T13776] overlayfs: missing 'lowerdir' 14:14:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) [ 894.506922][ T6330] usb 2-1: new low-speed USB device number 76 using dummy_hcd 14:14:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) 14:14:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)) [ 894.876892][ T6330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:14:17 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x170a) [ 894.932284][ T6330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:14:17 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4c00) [ 895.047186][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 895.073271][ T6330] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 895.095538][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.177875][T13770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.207481][ T6330] hub 2-1:1.0: bad descriptor, ignoring hub [ 895.213615][ T6330] hub: probe of 2-1:1.0 failed with error -5 [ 895.222138][ T6330] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 895.228660][ T6330] cdc_wdm 2-1:1.0: Unknown control protocol [ 896.004779][T13770] usb 2-1: reset low-speed USB device number 76 using dummy_hcd [ 896.507484][T13807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:14:23 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:23 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:23 executing program 0: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@private0}, 0x0, @in=@local}}, 0xe4) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 14:14:23 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x180a) 14:14:23 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5111) [ 900.986190][ T6330] usb 2-1: USB disconnect, device number 76 14:14:23 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000440)=[{0x0}], 0x30000) [ 901.140652][T13830] overlayfs: unrecognized mount option "{" or missing value [ 901.174198][T13831] overlayfs: missing 'lowerdir' 14:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5460, 0x0) [ 901.376781][ T26] usb 2-1: new low-speed USB device number 77 using dummy_hcd 14:14:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x400c12f5, 0x0) 14:14:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@empty}, {}, {@dev}, {@multicast1}, {@private}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) 14:14:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x125d, 0x0) 14:14:24 executing program 0: mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 901.747531][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.785413][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 901.914760][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 901.988547][ T26] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 902.061714][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.177554][T13822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 902.217832][ T26] hub 2-1:1.0: bad descriptor, ignoring hub [ 902.224323][ T26] hub: probe of 2-1:1.0 failed with error -5 [ 902.238729][ T26] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 902.254781][ T26] cdc_wdm 2-1:1.0: Unknown control protocol [ 902.430316][T13822] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 902.988099][T13822] usb 2-1: reset low-speed USB device number 77 using dummy_hcd [ 903.467275][T13845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:14:30 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:30 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x190a) 14:14:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5865) 14:14:30 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000100), 0x4) 14:14:30 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:14:30 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 908.038847][T13753] usb 2-1: USB disconnect, device number 77 14:14:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 14:14:30 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="1313281da5c9", @empty, @val, {@ipv4}}, 0x0) [ 908.210048][T13870] overlayfs: missing 'lowerdir' [ 908.241847][T13868] overlayfs: unrecognized mount option "{" or missing value 14:14:30 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$TIOCMGET(r1, 0x4004746a, 0x0) 14:14:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:14:30 executing program 0: socketpair(0x10, 0x3, 0x0, &(0x7f00000000c0)) [ 908.557760][ T5177] usb 2-1: new low-speed USB device number 78 using dummy_hcd 14:14:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000024c0)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES32]) [ 908.957992][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.984803][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 909.013317][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 909.036334][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 909.099336][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.187769][T13874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 909.209621][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 909.258348][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 909.266520][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 909.272965][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 909.423149][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.979214][T13867] usb 2-1: reset low-speed USB device number 78 using dummy_hcd [ 910.468170][T13874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:14:37 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1a03) 14:14:37 executing program 0: socketpair(0x1d, 0x0, 0x1, &(0x7f00000000c0)) 14:14:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5a0c) 14:14:37 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:14:37 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 915.093633][ T26] usb 2-1: USB disconnect, device number 78 14:14:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x43}) 14:14:37 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[], 0xb8}, 0x0) [ 915.291641][T13905] overlayfs: unrecognized mount option "{" or missing value [ 915.304953][T13910] overlayfs: missing 'lowerdir' 14:14:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffc}], 0x300}, 0x0) 14:14:37 executing program 0: socketpair(0x29, 0x2, 0x590b, &(0x7f0000000000)) [ 915.527553][ T5168] usb 2-1: new low-speed USB device number 79 using dummy_hcd 14:14:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000180)) 14:14:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000180)) [ 915.897125][ T5168] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.914769][ T5168] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 915.927670][ T5168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 915.938386][ T5168] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 915.950701][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.107574][T13898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 916.158175][ T5168] hub 2-1:1.0: bad descriptor, ignoring hub [ 916.171912][ T5168] hub: probe of 2-1:1.0 failed with error -5 [ 916.199422][ T5168] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 916.205453][ T5168] cdc_wdm 2-1:1.0: Unknown control protocol [ 916.368821][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.927371][T13898] usb 2-1: reset low-speed USB device number 79 using dummy_hcd [ 917.428068][T13922] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 917.767177][ T26] usb 2-1: USB disconnect, device number 79 14:14:44 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1a0a) 14:14:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000deffffff000000040000007a"], 0x28}}, 0x0) 14:14:44 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5b0c) 14:14:44 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:44 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 922.110748][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 14:14:44 executing program 0: pipe(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1) write$cgroup_devices(r1, 0x0, 0x9) [ 922.220014][T13930] overlayfs: unrecognized mount option "{" or missing value [ 922.301408][T13932] overlayfs: missing 'lowerdir' [ 922.507696][ T7] usb 2-1: new low-speed USB device number 80 using dummy_hcd 14:14:45 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5c02) 14:14:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1b0a) [ 922.907932][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.952429][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 923.065621][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:14:45 executing program 0: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x8) [ 923.140794][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 923.237517][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:14:45 executing program 0: r0 = io_uring_setup(0x50d8, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) 14:14:45 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 923.338204][T13941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 923.388985][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 923.394956][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 923.448728][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 923.474938][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 923.603135][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.614571][T13964] overlayfs: unrecognized mount option "{" or missing value [ 924.217662][T13941] usb 2-1: reset low-speed USB device number 80 using dummy_hcd [ 924.707566][T13965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 925.048348][ T7] usb 2-1: USB disconnect, device number 80 14:14:51 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0045878, 0x0) 14:14:51 executing program 0: io_uring_setup(0x7c38, &(0x7f0000000080)={0x0, 0x0, 0x2}) 14:14:51 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5c0c) 14:14:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1c0a) 14:14:51 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:51 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xf8, 0x71}, 0x20) 14:14:51 executing program 0: linkat(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0xffffffffffffff9c, 0x0, 0x1400) 14:14:51 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:51 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 929.552636][T13989] overlayfs: unrecognized mount option "{" or missing value [ 929.790307][T13997] overlayfs: unrecognized mount option "{" or missing value [ 929.807841][ T6330] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 929.874905][T14001] overlayfs: unrecognized mount option "{" or missing value 14:14:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5d0c) 14:14:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1d0a) [ 930.227410][ T6330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.292305][ T6330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 930.347663][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 930.376896][ T6330] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 930.386026][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.416946][T13986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 930.459308][ T6330] hub 2-1:1.0: bad descriptor, ignoring hub [ 930.468151][ T6330] hub: probe of 2-1:1.0 failed with error -5 [ 930.523776][ T6330] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 930.567935][ T6330] cdc_wdm 2-1:1.0: Unknown control protocol [ 930.667422][T13986] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 931.228048][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.234391][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.318047][T14008] usb 2-1: reset low-speed USB device number 81 using dummy_hcd [ 931.867892][T13986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 932.217927][ T7] usb 2-1: USB disconnect, device number 81 14:14:58 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:58 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:14:58 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{0x0}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:58 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:14:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5e01) 14:14:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1e0a) [ 936.568881][T14032] overlayfs: unrecognized mount option "{" or missing value [ 936.644961][T14033] overlayfs: unrecognized mount option "{" or missing value [ 936.777416][ T5165] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 936.846771][ T5161] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 937.147398][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:14:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1f00) 14:14:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5e0c) [ 937.277588][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.301754][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 937.336338][ T5161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 937.387997][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 937.427558][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 937.495040][ T5161] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 937.496613][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 937.536194][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.567754][T14019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.598352][ T5161] hub 1-1:1.0: bad descriptor, ignoring hub [ 937.604694][ T5161] hub: probe of 1-1:1.0 failed with error -5 [ 937.626244][ T5161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 937.646807][ T5161] cdc_wdm 1-1:1.0: Unknown control protocol [ 937.713439][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.877090][T14023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.917459][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 937.925955][ T5165] hub: probe of 2-1:1.0 failed with error -5 [ 937.953463][T14019] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 938.019201][ T5165] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 938.036582][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol 14:15:00 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{0x0}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 938.130092][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x1f0a) 14:15:00 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5f0c) 14:15:00 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 938.368001][ T7] usb 2-1: USB disconnect, device number 82 [ 938.470566][T14060] overlayfs: unrecognized mount option "{" or missing value [ 938.627072][T14019] usb 1-1: reset low-speed USB device number 37 using dummy_hcd [ 938.687293][ T897] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 939.057392][ T897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.077138][ T897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 939.088590][ T897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 939.127340][T14041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 939.143701][ T897] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 939.153340][ T897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.207086][T14058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 939.247988][ T897] hub 4-1:1.0: bad descriptor, ignoring hub [ 939.253949][ T897] hub: probe of 4-1:1.0 failed with error -5 [ 939.483089][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 14:15:02 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6000) [ 940.278967][T14045] cdc_wdm 1-1:1.0: Error autopm - -16 [ 940.279199][ T5161] usb 1-1: USB disconnect, device number 37 [ 940.293094][ T897] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 940.299917][T14052] cdc_wdm 1-1:1.0: Error autopm - -16 [ 940.314869][ T897] cdc_wdm 4-1:1.0: Unknown control protocol [ 940.697293][ T897] usb 4-1: reset low-speed USB device number 46 using dummy_hcd 14:15:03 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, 0x0, 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2000) 14:15:03 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:03 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{0x0}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 940.942568][T14079] overlayfs: unrecognized mount option "{" or missing value [ 941.021243][T14081] overlayfs: unrecognized mount option "{" or missing value 14:15:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6001) [ 941.150338][ T5161] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 941.177108][T14058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 14:15:03 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 941.417208][ T897] usb 4-1: USB disconnect, device number 46 [ 941.537593][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.557251][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 941.583155][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 941.617400][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 14:15:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2400) [ 941.651984][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:04 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 941.802143][T14069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 941.816868][ T897] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 941.840238][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 941.884607][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 941.894464][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 941.900986][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol 14:15:04 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:04 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x600c) [ 942.050970][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 942.084163][T14098] overlayfs: unrecognized mount option "{" or missing value [ 942.115240][T14098] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 942.188130][ T897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.206117][ T897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 942.235071][ T897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 942.263196][ T897] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 942.289625][ T897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.337089][T14086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 942.358586][ T897] hub 4-1:1.0: bad descriptor, ignoring hub [ 942.374395][ T897] hub: probe of 4-1:1.0 failed with error -5 [ 942.427730][ T5161] usb 1-1: new low-speed USB device number 38 using dummy_hcd 14:15:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2612) [ 942.576837][T14086] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 942.727897][T14069] usb 2-1: reset low-speed USB device number 83 using dummy_hcd [ 942.817962][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.847181][ T5161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 942.856193][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 942.866340][ T5161] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 942.875558][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.908030][T14096] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 14:15:05 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x610c) [ 942.928359][ T5161] hub 1-1:1.0: bad descriptor, ignoring hub [ 942.934320][ T5161] hub: probe of 1-1:1.0 failed with error -5 14:15:05 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 943.134727][T14096] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 943.192096][T14115] overlayfs: unrecognized mount option "{" or missing value [ 943.207658][T14101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 943.249289][ T897] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 943.258581][ T897] cdc_wdm 4-1:1.0: Unknown control protocol 14:15:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2712) [ 943.648537][ T897] usb 4-1: reset low-speed USB device number 47 using dummy_hcd [ 944.137615][T14086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.328045][T14103] cdc_wdm 2-1:1.0: Error autopm - -16 [ 944.333721][T14096] cdc_wdm 2-1:1.0: Error autopm - -16 [ 944.337024][ T5168] usb 2-1: USB disconnect, device number 83 [ 944.346288][ T5161] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 944.373076][ T5161] cdc_wdm 1-1:1.0: Unknown control protocol [ 944.476631][ T897] usb 4-1: USB disconnect, device number 47 [ 944.767921][ T5161] usb 1-1: reset low-speed USB device number 38 using dummy_hcd 14:15:07 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:07 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6203) 14:15:07 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:07 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x2a02) [ 944.996407][T14138] overlayfs: unrecognized mount option "{" or missing value [ 945.014126][T14139] overlayfs: unrecognized mount option "{" or missing value 14:15:07 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 945.248017][ T7] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 945.358149][ T5161] usb 1-1: device not accepting address 38, error -71 [ 945.658262][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.693737][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:15:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3000) 14:15:08 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x620c) [ 945.815955][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 945.866967][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 945.876428][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.884793][ T5161] usb 1-1: reset low-speed USB device number 38 using dummy_hcd [ 945.918750][T14132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:15:08 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 945.959407][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 945.970147][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 945.990600][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device 14:15:08 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 946.019655][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 946.174447][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 946.260600][T14158] overlayfs: missing 'lowerdir' [ 946.271595][T14159] overlayfs: unrecognized mount option "{" or missing value [ 946.398614][T14142] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 14:15:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3901) 14:15:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x630c) [ 946.691524][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.858303][T14160] usb 2-1: reset low-speed USB device number 84 using dummy_hcd [ 946.958444][ T5177] usb 1-1: USB disconnect, device number 38 [ 947.407784][T14132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 948.537619][T14165] cdc_wdm 2-1:1.0: Error autopm - -16 [ 948.537919][ T5161] usb 2-1: USB disconnect, device number 84 14:15:11 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:11 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:11 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3c00) 14:15:11 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6401) 14:15:11 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 949.240716][T14183] overlayfs: unrecognized mount option "{" or missing value [ 949.266117][T14186] overlayfs: unrecognized mount option "{" or missing value [ 949.329727][T14191] overlayfs: unrecognized mount option "{" or missing value [ 949.487383][ T5177] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 949.857646][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:12 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x640c) 14:15:12 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f00) [ 949.906856][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 949.985301][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 950.079591][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 950.168897][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.297584][T14188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:15:12 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:12 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 950.338119][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 950.357302][ T5177] hub: probe of 2-1:1.0 failed with error -5 14:15:12 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 950.400813][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 950.422838][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 950.549492][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 950.582155][T14208] overlayfs: unrecognized mount option "{" or missing value [ 950.722434][T14214] overlayfs: unrecognized mount option "{" or missing value [ 950.751358][T14211] overlayfs: unrecognized mount option "{" or missing value 14:15:13 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6500) [ 951.217236][T14188] usb 2-1: reset low-speed USB device number 85 using dummy_hcd [ 951.697438][T14212] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.048036][T14061] usb 2-1: USB disconnect, device number 85 14:15:14 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:14 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4000) 14:15:14 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:14 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:14 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x650c) [ 952.741639][T14238] overlayfs: unrecognized mount option "{" or missing value [ 952.778165][T14236] overlayfs: unrecognized mount option "{" or missing value [ 952.788381][T14240] overlayfs: unrecognized mount option "{" or missing value [ 953.107396][ T5168] usb 2-1: new low-speed USB device number 86 using dummy_hcd 14:15:15 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6558) 14:15:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x408a) [ 953.497202][ T5168] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.532404][ T5168] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 953.578478][ T5168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 953.589247][ T5168] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 953.598685][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:16 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 953.637431][T14241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 953.668675][ T5168] hub 2-1:1.0: bad descriptor, ignoring hub [ 953.678044][ T5168] hub: probe of 2-1:1.0 failed with error -5 [ 953.765176][ T5168] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 953.839971][ T5168] cdc_wdm 2-1:1.0: Unknown control protocol [ 953.877928][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:16 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 954.048708][T14256] overlayfs: unrecognized mount option "{" or missing value 14:15:16 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 954.262875][T14264] overlayfs: missing 'lowerdir' 14:15:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4203) [ 954.334175][T14265] overlayfs: unrecognized mount option "{" or missing value [ 954.567900][T14239] usb 2-1: reset low-speed USB device number 86 using dummy_hcd [ 955.067239][T14241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:15:22 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:22 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:22 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x660c) 14:15:22 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:22 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4603) [ 959.742716][ T5161] usb 2-1: USB disconnect, device number 86 [ 959.930537][T14278] overlayfs: unrecognized mount option "{" or missing value [ 960.005585][T14292] overlayfs: missing 'lowerdir' [ 960.024929][T14295] overlayfs: unrecognized mount option "{" or missing value [ 960.116782][ T5161] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 960.527727][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:22 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6701) [ 960.574729][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 960.606106][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:15:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4800) [ 960.766155][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 960.860069][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:23 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 960.987700][T14283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:15:23 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:23 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 961.033211][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 961.071381][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 961.108958][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 961.115151][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol [ 961.223931][T14304] overlayfs: unrecognized mount option "{" or missing value [ 961.253467][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.354143][T14317] overlayfs: unrecognized mount option "{" or missing value [ 961.380481][T14314] overlayfs: unrecognized mount option "{" or missing value 14:15:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4802) [ 961.849546][T14283] usb 2-1: reset low-speed USB device number 87 using dummy_hcd [ 962.368239][T14315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:15:29 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:29 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:29 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x670c) 14:15:29 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:29 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4a00) [ 966.859626][ T7] usb 2-1: USB disconnect, device number 87 [ 967.030054][T14343] overlayfs: unrecognized mount option "{" or missing value [ 967.093249][T14345] overlayfs: unrecognized mount option "{" or missing value [ 967.186579][T14344] overlayfs: unrecognized mount option "{" or missing value [ 967.246867][ T7] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 967.637801][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.671259][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:15:30 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4a03) 14:15:30 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6800) [ 967.765117][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 967.863529][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 967.935683][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.037875][T14333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 968.048798][T14357] overlayfs: unrecognized mount option "{" or missing value [ 968.058515][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 968.067804][ T7] hub: probe of 2-1:1.0 failed with error -5 14:15:30 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 968.089292][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 968.151174][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 968.265719][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:30 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 968.467825][T14061] usb 4-1: new low-speed USB device number 48 using dummy_hcd 14:15:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4c00) [ 968.827906][ T897] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 968.848394][T14061] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.858803][T14061] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 968.875739][T14061] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 968.896711][T14061] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 968.905774][T14061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.914527][T14333] usb 2-1: reset low-speed USB device number 88 using dummy_hcd [ 968.937067][T14359] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 968.959559][T14061] hub 4-1:1.0: bad descriptor, ignoring hub [ 968.965507][T14061] hub: probe of 4-1:1.0 failed with error -5 [ 969.162729][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 969.186996][ T897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.197862][ T897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 969.207219][ T897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 969.217551][ T897] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 969.229338][ T897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.257056][T14363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 969.278772][ T897] hub 1-1:1.0: bad descriptor, ignoring hub [ 969.284722][ T897] hub: probe of 1-1:1.0 failed with error -5 [ 969.438448][T14361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 969.482328][T14061] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 969.490048][T14061] cdc_wdm 4-1:1.0: Unknown control protocol [ 969.490442][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 969.847954][T14061] usb 4-1: reset low-speed USB device number 48 using dummy_hcd [ 970.327197][T14368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 970.549319][T14359] cdc_wdm 2-1:1.0: Error autopm - -16 [ 970.555118][ T5177] usb 2-1: USB disconnect, device number 88 [ 970.566172][ T897] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 970.566495][T14363] cdc_wdm 2-1:1.0: Error autopm - -16 [ 970.573730][ T897] cdc_wdm 1-1:1.0: Unknown control protocol [ 970.706952][ T5161] usb 4-1: USB disconnect, device number 48 [ 970.958873][ T897] usb 1-1: reset low-speed USB device number 39 using dummy_hcd 14:15:33 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r4, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:15:33 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x680c) 14:15:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4f0a) 14:15:33 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 971.188419][T14384] overlayfs: unrecognized mount option "{" or missing value [ 971.293870][T14388] overlayfs: missing 'lowerdir' [ 971.426755][ T7] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 971.437411][T14371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 14:15:33 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 971.647236][ T897] usb 1-1: USB disconnect, device number 39 [ 971.837994][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:34 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x690c) 14:15:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5111) [ 971.898033][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 971.917028][T14390] overlayfs: unrecognized mount option "{" or missing value 14:15:34 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r4, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 971.969084][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 972.035173][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 972.093501][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.178130][T14379] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 14:15:34 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 972.248767][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 972.269894][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 972.323788][T14405] overlayfs: unrecognized mount option "{" or missing value [ 972.409059][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 972.449880][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 972.471790][T14379] bond17 (uninitialized): Released all slaves [ 972.481305][T14410] overlayfs: unrecognized mount option "{" or missing value [ 972.488722][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 972.702366][T14379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.727070][T14379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6c00) 14:15:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x530a) [ 972.878093][ T897] usb 2-1: USB disconnect, device number 89 14:15:35 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:35 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r4, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:15:35 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:35 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 973.395110][T14424] overlayfs: unrecognized mount option "{" or missing value [ 973.627055][ T5159] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 973.657465][ T7] usb 2-1: new low-speed USB device number 90 using dummy_hcd 14:15:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6d02) 14:15:36 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5402) [ 973.737862][ T5161] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 973.997383][ T5159] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.008057][ T5159] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 974.017692][ T5159] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 974.028293][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.039016][ T5159] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 974.049027][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 974.058372][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.067149][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 974.084156][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 974.094033][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.102498][T14421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 974.128330][T14425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 974.135589][ T5161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:36 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 974.157557][ T5161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 974.170329][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 974.176498][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 974.183459][ T5159] hub 1-1:1.0: bad descriptor, ignoring hub [ 974.190403][ T5159] hub: probe of 1-1:1.0 failed with error -5 [ 974.197413][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 974.211902][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 974.219235][ T5159] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 974.225258][ T5161] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 974.234584][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 974.240673][ T5159] cdc_wdm 1-1:1.0: Unknown control protocol [ 974.259414][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.308356][T14428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 974.327768][ T5161] hub 4-1:1.0: bad descriptor, ignoring hub [ 974.334362][ T5161] hub: probe of 4-1:1.0 failed with error -5 [ 974.343659][ T5161] cdc_wdm 4-1:1.0: cdc-wdm2: USB WDM device [ 974.349913][ T5161] cdc_wdm 4-1:1.0: Unknown control protocol [ 974.370869][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 974.438659][T14425] bond17 (uninitialized): Released all slaves [ 974.458260][T14442] overlayfs: unrecognized mount option "{" or missing value [ 974.468404][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 974.565781][T14428] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:15:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7400) 14:15:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x540a) [ 974.667968][ T5168] usb 1-1: USB disconnect, device number 40 [ 974.680233][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.711954][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.748578][ T5161] usb 2-1: USB disconnect, device number 90 [ 974.758510][ T897] usb 4-1: USB disconnect, device number 49 [ 974.766697][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 974.773337][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 974.779438][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 975.108095][ T5159] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 975.188153][ T5168] usb 1-1: new low-speed USB device number 41 using dummy_hcd 14:15:37 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:37 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 975.453270][T14458] overlayfs: unrecognized mount option "{" or missing value 14:15:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7403) [ 975.496896][ T5159] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.513751][ T5159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 975.543708][ T5159] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 975.567048][ T5168] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.594834][ T5159] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 975.605546][ T5168] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 975.617045][ T5161] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 975.636253][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.644739][ T5168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 975.679993][ T5168] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 975.697018][T14428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 975.710017][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.719006][ T5159] hub 4-1:1.0: bad descriptor, ignoring hub [ 975.728407][ T5159] hub: probe of 4-1:1.0 failed with error -5 [ 975.749355][ T5159] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 975.767757][ T5159] cdc_wdm 4-1:1.0: Unknown control protocol [ 975.777221][T14421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 975.798243][ T5168] hub 1-1:1.0: bad descriptor, ignoring hub [ 975.813676][ T5168] hub: probe of 1-1:1.0 failed with error -5 [ 975.839905][ T5168] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 975.854524][ T5168] cdc_wdm 1-1:1.0: Unknown control protocol [ 975.988007][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.015752][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 976.056601][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 976.082785][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 976.107606][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.139433][ T5159] usb 4-1: USB disconnect, device number 50 [ 976.147046][T14452] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 976.173596][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 976.205867][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 976.227463][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 976.242565][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol [ 976.278161][ T5159] usb 1-1: USB disconnect, device number 41 [ 976.383889][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 976.427013][T14452] bond17 (uninitialized): Released all slaves 14:15:38 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:38 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5865) 14:15:38 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7801) 14:15:38 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 976.688205][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.770172][T14481] overlayfs: unrecognized mount option "{" or missing value [ 976.785933][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.796932][T14482] overlayfs: unrecognized mount option "{" or missing value [ 976.936733][ T5159] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 976.997000][ T5165] usb 2-1: USB disconnect, device number 91 [ 977.308183][ T5159] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.327432][ T5159] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 977.336560][ T5159] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 977.346703][ T5159] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 977.427137][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.468269][T14474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 977.488016][ T5159] hub 1-1:1.0: bad descriptor, ignoring hub [ 977.497266][ T5159] hub: probe of 1-1:1.0 failed with error -5 14:15:39 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7a00) 14:15:39 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5a0a) [ 977.513495][ T5159] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 977.525699][ T5159] cdc_wdm 1-1:1.0: Unknown control protocol 14:15:39 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:40 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r4, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 977.799702][T14493] overlayfs: unrecognized mount option "{" or missing value [ 977.816519][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 977.840541][T14474] bond5 (uninitialized): Released all slaves [ 977.971287][T14498] overlayfs: unrecognized mount option "{" or missing value [ 978.109995][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.128069][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:43 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:43 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5c02) 14:15:43 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:43 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:43 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7a02) 14:15:43 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 981.176737][T14474] cdc_wdm 2-1:1.0: Error autopm - -16 [ 981.351274][ T5161] usb 1-1: USB disconnect, device number 42 [ 981.386201][T14521] overlayfs: unrecognized mount option "{" or missing value [ 981.412445][T14522] overlayfs: unrecognized mount option "{" or missing value [ 981.668012][ T5161] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 981.827710][ T5165] usb 1-1: new low-speed USB device number 43 using dummy_hcd 14:15:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5e01) 14:15:44 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8100) [ 982.068000][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.136138][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 982.167502][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 982.177682][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 982.187003][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.197029][ T5165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:44 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 982.265654][ T5165] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 982.267247][T14520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 982.358076][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 982.365187][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 982.371492][ T5165] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 982.381820][ T5165] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 982.398386][ T5165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.427581][T14517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 982.448849][ T5165] hub 1-1:1.0: bad descriptor, ignoring hub [ 982.464816][ T5161] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 982.471628][ T5165] hub: probe of 1-1:1.0 failed with error -5 [ 982.479421][ T5165] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 982.481707][T14531] overlayfs: unrecognized mount option "{" or missing value [ 982.485432][ T5165] cdc_wdm 1-1:1.0: Unknown control protocol [ 982.554238][ T5161] cdc_wdm 2-1:1.0: Unknown control protocol [ 982.566610][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 982.589425][T14508] bond17 (uninitialized): Released all slaves 14:15:45 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 982.650200][ T5161] usb 2-1: USB disconnect, device number 92 [ 982.719314][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 982.746869][T14517] bond5 (uninitialized): Released all slaves [ 982.931913][T14541] overlayfs: unrecognized mount option "{" or missing value 14:15:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x5f00) 14:15:45 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8401) [ 983.012938][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.038526][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.216750][ T5161] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 983.231394][ T5168] usb 1-1: USB disconnect, device number 43 [ 983.486928][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 983.607304][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.617507][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 983.631476][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 983.686118][ T5161] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 983.706930][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 983.716118][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.747979][T14508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.768250][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 983.778641][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 983.841250][ T5161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 983.969743][ T5177] usb 2-1: USB disconnect, device number 93 14:15:46 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:46 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:46 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:46 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6000) 14:15:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8802) 14:15:46 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 984.643621][T14570] overlayfs: unrecognized mount option "{" or missing value [ 984.693539][T14571] overlayfs: unrecognized mount option "{" or missing value [ 984.718501][T14569] overlayfs: unrecognized mount option "{" or missing value [ 984.878141][ T897] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 985.246811][ T897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.292583][ T897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:15:47 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8b03) 14:15:47 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6203) [ 985.335485][ T897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 985.346174][ T897] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 14:15:47 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 985.507629][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.588327][T14559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 985.609227][ T897] hub 2-1:1.0: bad descriptor, ignoring hub [ 985.631225][ T897] hub: probe of 2-1:1.0 failed with error -5 [ 985.698652][ T897] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 985.762779][ T897] cdc_wdm 2-1:1.0: Unknown control protocol [ 985.776435][T14582] overlayfs: unrecognized mount option "{" or missing value [ 985.816939][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 985.870281][T14559] bond17 (uninitialized): Released all slaves 14:15:48 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:48 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 986.208400][T14592] overlayfs: unrecognized mount option "{" or missing value 14:15:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6401) [ 986.320867][ T5159] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 986.468295][T14559] cdc_wdm 2-1:1.0: Error autopm - -16 [ 986.468438][ T897] usb 2-1: USB disconnect, device number 94 [ 986.636769][ T897] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 986.707840][ T5159] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.724457][ T5159] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 986.749565][ T5159] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 986.774163][ T5159] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 986.798785][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.849225][T14586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 986.868350][ T5159] hub 1-1:1.0: bad descriptor, ignoring hub [ 986.876779][ T897] usb 2-1: Using ep0 maxpacket: 8 [ 986.877387][ T5159] hub: probe of 1-1:1.0 failed with error -5 [ 986.917165][ T5159] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 986.935831][ T5159] cdc_wdm 1-1:1.0: Unknown control protocol [ 986.996926][ T897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.013284][ T897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 987.022279][ T897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 987.033501][ T897] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 987.043592][ T897] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 987.052780][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.087711][T14584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.103143][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 987.108664][ T897] hub 2-1:1.0: bad descriptor, ignoring hub [ 987.129564][ T897] hub: probe of 2-1:1.0 failed with error -5 [ 987.137360][ T897] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 987.149506][T14586] bond5 (uninitialized): Released all slaves [ 987.458473][ T5159] usb 2-1: USB disconnect, device number 95 [ 987.768641][T14597] cdc_wdm 1-1:1.0: Error autopm - -16 [ 987.774327][ T897] usb 1-1: USB disconnect, device number 44 14:15:50 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:50 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:50 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9000) 14:15:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6500) 14:15:50 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 987.946886][ T897] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 987.980667][T14615] overlayfs: unrecognized mount option "{" or missing value [ 987.986264][T14616] overlayfs: unrecognized mount option "{" or missing value [ 988.176825][ T5177] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 988.207885][ T897] usb 1-1: Using ep0 maxpacket: 8 [ 988.327996][ T897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.347564][ T897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 988.356583][ T897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 988.367987][ T897] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 988.378197][ T897] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 988.387350][ T897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.427649][T14586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.470367][ T897] hub 1-1:1.0: bad descriptor, ignoring hub [ 988.483533][ T897] hub: probe of 1-1:1.0 failed with error -5 [ 988.527416][ T897] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 988.546903][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.580205][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 988.661172][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 14:15:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6558) 14:15:51 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9002) [ 988.791438][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 14:15:51 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 988.872457][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.926105][ T5165] usb 1-1: USB disconnect, device number 45 [ 988.946981][T14607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 14:15:51 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 988.988303][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 988.997523][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 989.024744][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 989.040494][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 989.144245][T14630] overlayfs: unrecognized mount option "{" or missing value [ 989.193563][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 989.261957][T14607] bond17 (uninitialized): Released all slaves [ 989.285206][T14627] overlayfs: unrecognized mount option "{" or missing value 14:15:51 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:51 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9201) 14:15:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6800) [ 989.816698][ T5159] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 989.868315][T14634] cdc_wdm 2-1:1.0: Error autopm - -16 [ 989.873951][ T5161] usb 2-1: USB disconnect, device number 96 [ 990.068087][ T5161] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 990.198123][ T5159] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.209003][ T5159] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 990.218525][ T5159] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 990.228607][ T5159] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 990.237767][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.267551][T14637] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 990.288391][ T5159] hub 1-1:1.0: bad descriptor, ignoring hub [ 990.297469][ T5159] hub: probe of 1-1:1.0 failed with error -5 [ 990.308761][ T5159] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 990.314827][ T5159] cdc_wdm 1-1:1.0: Unknown control protocol [ 990.347196][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 990.497414][ T5161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.508597][ T5161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 990.543689][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 990.549518][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 990.555792][ T5161] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 990.574853][ T5161] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 990.585476][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.607838][T14637] bond5 (uninitialized): Released all slaves [ 990.623337][T14607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 990.648408][ T5161] hub 2-1:1.0: bad descriptor, ignoring hub [ 990.654359][ T5161] hub: probe of 2-1:1.0 failed with error -5 [ 990.665169][ T5161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 990.987975][ T5161] usb 2-1: USB disconnect, device number 97 [ 991.227805][T14646] usb 1-1: reset low-speed USB device number 46 using dummy_hcd 14:15:53 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9002) 14:15:53 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:53 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9901) 14:15:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6c00) 14:15:53 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) [ 991.510374][T14663] overlayfs: unrecognized mount option "{" or missing value [ 991.707767][T14637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 991.727526][ T5195] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 992.067957][ T5177] usb 1-1: USB disconnect, device number 46 [ 992.118193][ T5195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.147021][ T5195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 992.155983][ T5195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 992.166508][ T5195] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 992.176912][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x6d02) 14:15:54 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 992.228084][T14656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 14:15:54 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa602) [ 992.268797][ T5195] hub 2-1:1.0: bad descriptor, ignoring hub [ 992.278195][ T5195] hub: probe of 2-1:1.0 failed with error -5 [ 992.356568][ T5195] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 992.368504][ T5195] cdc_wdm 2-1:1.0: Unknown control protocol 14:15:54 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 992.472879][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 992.595015][T14680] overlayfs: unrecognized mount option "{" or missing value [ 992.613312][T14656] bond17 (uninitialized): Released all slaves [ 992.668298][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.674817][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.728531][ T897] usb 2-1: USB disconnect, device number 98 14:15:58 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:15:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7400) 14:15:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb201) 14:15:58 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:58 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:15:58 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) [ 996.253634][T14679] cdc_wdm 1-1:1.0: Error autopm - -16 [ 996.481746][T14706] overlayfs: unrecognized mount option "{" or missing value [ 996.524808][T14689] overlayfs: unrecognized mount option "{" or missing value [ 996.646922][ T5177] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 996.717357][ T897] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 997.017476][ T5177] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.052135][ T5177] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 997.086965][ T897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.121450][ T897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:15:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7600) 14:15:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb615) [ 997.134136][ T5177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 997.222457][ T897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 997.246349][ T5177] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 997.277295][ T897] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 997.286502][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.295618][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.326992][T14696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 997.347025][T14695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 14:15:59 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 997.387678][ T5177] hub 1-1:1.0: bad descriptor, ignoring hub [ 997.402192][ T5177] hub: probe of 1-1:1.0 failed with error -5 [ 997.411315][ T897] hub 2-1:1.0: bad descriptor, ignoring hub [ 997.441552][ T897] hub: probe of 2-1:1.0 failed with error -5 [ 997.461855][ T5177] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 997.472449][ T897] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 997.480930][ T5177] cdc_wdm 1-1:1.0: Unknown control protocol [ 997.505554][ T897] cdc_wdm 2-1:1.0: Unknown control protocol [ 997.582721][T14720] overlayfs: unrecognized mount option "{" or missing value 14:15:59 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 997.623825][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.669630][T14695] bond17 (uninitialized): Released all slaves [ 997.686252][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 997.718176][T14696] bond5 (uninitialized): Released all slaves [ 997.868806][ T5165] usb 2-1: USB disconnect, device number 99 [ 997.877969][T14729] overlayfs: unrecognized mount option "{" or missing value 14:16:00 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb801) 14:16:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7603) [ 998.328017][T14723] usb 1-1: reset low-speed USB device number 47 using dummy_hcd [ 998.847228][T14696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 999.137892][ T5177] usb 1-1: USB disconnect, device number 47 [ 999.138032][ T5195] usb 1-1: Failed to suspend device, error -71 14:16:02 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:02 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) 14:16:02 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:02 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:02 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb803) 14:16:02 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7615) [ 999.848215][T14758] overlayfs: unrecognized mount option "{" or missing value [ 999.873465][T14759] overlayfs: unrecognized mount option "{" or missing value [ 999.901643][T14760] overlayfs: unrecognized mount option "{" or missing value [ 1000.187274][ T5159] usb 2-1: new low-speed USB device number 100 using dummy_hcd 14:16:02 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7a00) 14:16:02 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb80f) [ 1000.617413][ T5159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.672747][ T5159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1000.793197][ T5159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1000.897663][ T5159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1000.994932][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.108627][T14742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:16:03 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:03 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1001.160749][ T5159] hub 2-1:1.0: bad descriptor, ignoring hub [ 1001.173573][ T5159] hub: probe of 2-1:1.0 failed with error -5 [ 1001.195206][ T5159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1001.201703][ T5159] cdc_wdm 2-1:1.0: Unknown control protocol 14:16:03 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1001.415064][T14782] overlayfs: unrecognized mount option "{" or missing value [ 1001.452050][T14780] overlayfs: unrecognized mount option "{" or missing value 14:16:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xba03) [ 1001.510646][T14774] overlayfs: unrecognized mount option "{" or missing value [ 1001.542060][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x7a02) [ 1001.579034][T14742] bond17 (uninitialized): Released all slaves 14:16:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) 14:16:08 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:08 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:08 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:08 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xbc01) 14:16:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8100) [ 1005.848736][T14742] cdc_wdm 2-1:1.0: Error autopm - -16 [ 1005.857409][T14061] usb 2-1: USB disconnect, device number 100 [ 1006.052747][T14799] overlayfs: unrecognized mount option "{" or missing value [ 1006.083398][T14803] overlayfs: unrecognized mount option "{" or missing value [ 1006.089557][T14813] overlayfs: unrecognized mount option "{" or missing value [ 1006.337001][T14061] usb 2-1: new low-speed USB device number 101 using dummy_hcd 14:16:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8600) [ 1006.707553][T14061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.726418][T14061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:16:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xca03) [ 1006.870303][T14061] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1006.998857][T14061] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1007.088903][T14061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.197669][T14809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:16:09 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:09 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1007.239321][T14061] hub 2-1:1.0: bad descriptor, ignoring hub [ 1007.263116][T14061] hub: probe of 2-1:1.0 failed with error -5 14:16:09 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1007.295006][T14061] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1007.318595][T14061] cdc_wdm 2-1:1.0: Unknown control protocol [ 1007.491019][T14834] overlayfs: unrecognized mount option "{" or missing value [ 1007.510142][T14840] overlayfs: unrecognized mount option "{" or missing value [ 1007.525937][T14843] overlayfs: unrecognized mount option "{" or missing value [ 1007.549521][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1007.598796][T14809] bond17 (uninitialized): Released all slaves 14:16:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xd303) 14:16:14 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) 14:16:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8602) 14:16:14 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:14 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:14 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:14 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xd802) [ 1011.809295][T14846] cdc_wdm 2-1:1.0: Error autopm - -16 [ 1011.809492][T14061] usb 2-1: USB disconnect, device number 101 [ 1011.986269][T14873] overlayfs: unrecognized mount option "{" or missing value [ 1011.999618][T14874] overlayfs: unrecognized mount option "{" or missing value [ 1012.010873][T14870] overlayfs: unrecognized mount option "{" or missing value [ 1012.436726][T14061] usb 2-1: new low-speed USB device number 102 using dummy_hcd 14:16:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8802) 14:16:15 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xd902) 14:16:15 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1012.816998][T14061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.835756][T14061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.891223][T14061] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1012.962347][T14061] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1012.977183][T14061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:15 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1013.027507][T14865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1013.048127][T14061] hub 2-1:1.0: bad descriptor, ignoring hub [ 1013.056863][T14061] hub: probe of 2-1:1.0 failed with error -5 [ 1013.076104][T14061] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1013.091796][T14061] cdc_wdm 2-1:1.0: Unknown control protocol 14:16:15 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1013.201105][T14890] overlayfs: unrecognized mount option "{" or missing value [ 1013.309791][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1013.338244][T14865] bond17 (uninitialized): Released all slaves [ 1013.353159][T14900] overlayfs: unrecognized mount option "{" or missing value [ 1013.427638][T14889] overlayfs: unrecognized mount option "{" or missing value 14:16:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xda03) 14:16:19 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:19 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x8b03) 14:16:19 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:19 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:19 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:16:20 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xdc01) [ 1017.619113][T14901] cdc_wdm 2-1:1.0: Error autopm - -16 [ 1017.619400][T14061] usb 2-1: USB disconnect, device number 102 [ 1017.857875][T14929] overlayfs: unrecognized mount option "{" or missing value [ 1017.869839][T14931] overlayfs: unrecognized mount option "{" or missing value [ 1017.968642][T14934] overlayfs: unrecognized mount option "{" or missing value [ 1018.026971][ T5161] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 1018.387376][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.406367][ T5161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1018.430577][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1018.441348][ T5161] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1018.467689][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:20 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xec03) 14:16:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9002) [ 1018.567791][T14912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1018.631362][ T5161] hub 1-1:1.0: bad descriptor, ignoring hub [ 1018.703217][ T5161] hub: probe of 1-1:1.0 failed with error -5 [ 1018.796195][ T5161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1018.842059][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1018.867737][ T5161] cdc_wdm 1-1:1.0: Unknown control protocol 14:16:21 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1018.967897][ T5161] usb 1-1: USB disconnect, device number 48 14:16:21 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:21 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1019.287605][T14950] overlayfs: unrecognized mount option "{" or missing value [ 1019.380277][T14958] overlayfs: unrecognized mount option "{" or missing value [ 1019.411882][T14957] overlayfs: unrecognized mount option "{" or missing value 14:16:21 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf000) 14:16:21 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9201) [ 1019.567926][ T5161] usb 1-1: new low-speed USB device number 49 using dummy_hcd 14:16:22 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1019.947753][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.972658][ T5161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1019.997282][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1020.012517][ T5161] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1020.027230][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.058386][T14942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1020.098358][ T5161] hub 1-1:1.0: bad descriptor, ignoring hub [ 1020.122778][ T5161] hub: probe of 1-1:1.0 failed with error -5 [ 1020.173677][ T5161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1020.207270][ T5161] cdc_wdm 1-1:1.0: Unknown control protocol 14:16:22 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1020.352124][T14967] overlayfs: unrecognized mount option "{" or missing value 14:16:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9801) [ 1020.487940][ T5159] usb 1-1: USB disconnect, device number 49 [ 1020.611382][T14977] overlayfs: unrecognized mount option "{" or missing value 14:16:23 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:23 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfa03) 14:16:23 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:23 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1021.195485][T14987] overlayfs: unrecognized mount option "{" or missing value [ 1021.229217][T14990] overlayfs: unrecognized mount option "{" or missing value 14:16:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x9901) [ 1021.269436][T14996] overlayfs: unrecognized mount option "{" or missing value 14:16:23 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:24 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfeff) 14:16:24 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1021.805335][T15004] overlayfs: unrecognized mount option "{" or missing value [ 1022.034511][T15006] overlayfs: unrecognized mount option "{" or missing value 14:16:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa200) 14:16:24 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:16:24 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:24 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:25 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xff0f) [ 1022.808203][T15018] overlayfs: unrecognized mount option "{" or missing value 14:16:25 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1022.893431][T15025] overlayfs: unrecognized mount option "{" or missing value [ 1022.996797][T14061] usb 2-1: new low-speed USB device number 103 using dummy_hcd 14:16:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa201) 14:16:25 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1023.144425][T15037] overlayfs: unrecognized mount option "{" or missing value [ 1023.299430][T15040] overlayfs: unrecognized mount option "{" or missing value [ 1023.367863][T14061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.415427][T14061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1023.467231][T14061] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1023.516792][T14061] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1023.526425][T14061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:25 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1023.627242][T15022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1023.667842][T14061] hub 2-1:1.0: bad descriptor, ignoring hub [ 1023.678036][T14061] hub: probe of 2-1:1.0 failed with error -5 14:16:26 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xff7f) [ 1023.716562][T14061] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device 14:16:26 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1023.781279][T14061] cdc_wdm 2-1:1.0: Unknown control protocol [ 1023.800223][T15045] overlayfs: unrecognized mount option "{" or missing value 14:16:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa203) [ 1023.973571][T15052] overlayfs: unrecognized mount option "{" or missing value [ 1023.984287][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:26 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1024.293727][T15062] overlayfs: unrecognized mount option "{" or missing value [ 1024.649610][T15057] usb 2-1: reset low-speed USB device number 103 using dummy_hcd [ 1025.178119][T15059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1025.527433][ T5177] usb 2-1: USB disconnect, device number 103 14:16:32 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfffe) 14:16:32 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa602) [ 1029.806408][T15068] overlayfs: unrecognized mount option "{" or missing value [ 1029.815114][T15072] overlayfs: unrecognized mount option "{" or missing value 14:16:32 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1029.881128][T15091] overlayfs: unrecognized mount option "{" or missing value [ 1029.893090][T15086] overlayfs: unrecognized mount option "{" or missing value 14:16:32 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1030.090757][T15094] overlayfs: unrecognized mount option "{" or missing value [ 1030.220443][T15101] overlayfs: unrecognized mount option "{" or missing value 14:16:32 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:32 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1030.434220][T15105] overlayfs: unrecognized mount option "{" or missing value 14:16:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd61) 14:16:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xa801) [ 1030.624410][T15111] overlayfs: unrecognized mount option "{" or missing value 14:16:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1030.708760][T15113] overlayfs: unrecognized mount option "{" or missing value 14:16:33 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1030.872169][T15123] overlayfs: unrecognized mount option "{" or missing value 14:16:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:33 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1031.050401][T15129] overlayfs: unrecognized mount option "{" or missing value [ 1031.082981][T15134] overlayfs: unrecognized mount option "{" or missing value [ 1031.307089][T15142] overlayfs: unrecognized mount option "{" or missing value 14:16:33 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd62) 14:16:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xac00) [ 1031.704399][T15146] overlayfs: unrecognized mount option "{" or missing value 14:16:34 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:34 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1032.070931][T15158] overlayfs: unrecognized mount option "{" or missing value [ 1032.165106][T15160] overlayfs: unrecognized mount option "{" or missing value 14:16:34 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:34 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd63) 14:16:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb201) [ 1032.521610][T15165] overlayfs: unrecognized mount option "{" or missing value 14:16:34 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:35 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1032.798511][T15176] overlayfs: unrecognized mount option "{" or missing value [ 1032.950889][T15181] overlayfs: unrecognized mount option "{" or missing value 14:16:35 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:35 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd64) [ 1033.220727][T15186] overlayfs: unrecognized mount option "{" or missing value 14:16:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb801) [ 1033.305585][T15188] overlayfs: unrecognized mount option "{" or missing value 14:16:35 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:16:35 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:36 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1033.719447][T15205] overlayfs: unrecognized mount option "{" or missing value [ 1033.827139][ T5161] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 1033.952337][T15212] overlayfs: unrecognized mount option "{" or missing value 14:16:36 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd65) [ 1034.126472][T15214] overlayfs: unrecognized mount option "{" or missing value 14:16:36 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb803) 14:16:36 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1034.227975][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.252372][ T5161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1034.309481][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1034.332106][ T5161] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1034.341910][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:36 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1034.377613][T15203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1034.404024][ T5161] hub 1-1:1.0: bad descriptor, ignoring hub [ 1034.436924][ T5161] hub: probe of 1-1:1.0 failed with error -5 [ 1034.464626][ T5161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1034.470932][ T5161] cdc_wdm 1-1:1.0: Unknown control protocol [ 1034.537346][T15226] overlayfs: unrecognized mount option "{" or missing value [ 1034.575845][T15223] overlayfs: unrecognized mount option "{" or missing value [ 1034.667590][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:37 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:37 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1034.949446][T15235] overlayfs: unrecognized mount option "{" or missing value 14:16:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd66) 14:16:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xb80f) [ 1035.165292][T15244] overlayfs: unrecognized mount option "{" or missing value [ 1035.308243][T15203] usb 1-1: reset low-speed USB device number 50 using dummy_hcd [ 1035.837081][T15233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.188277][ T5161] usb 1-1: USB disconnect, device number 50 14:16:42 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:42 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:42 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:42 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd67) 14:16:42 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:42 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc401) [ 1040.557458][T15258] overlayfs: unrecognized mount option "{" or missing value [ 1040.710584][T15271] overlayfs: unrecognized mount option "{" or missing value [ 1040.744547][T15264] overlayfs: unrecognized mount option "{" or missing value 14:16:43 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1041.096229][T15284] overlayfs: unrecognized mount option "{" or missing value 14:16:43 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd68) 14:16:43 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc603) 14:16:43 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:44 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:44 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1042.080815][T15302] overlayfs: unrecognized mount option "{" or missing value 14:16:44 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd69) 14:16:44 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, 0x0, 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xc801) [ 1042.486780][T15316] overlayfs: unrecognized mount option "{" or missing value 14:16:44 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:45 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:45 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6a) 14:16:45 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:16:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xca03) 14:16:45 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:46 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1043.916883][ T5161] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 1043.935079][T15350] overlayfs: unrecognized mount option "{" or missing value 14:16:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6b) 14:16:46 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:46 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xda03) [ 1044.357894][ T5161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.377376][ T5161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1044.437324][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1044.443551][T15354] overlayfs: unrecognized mount option "{" or missing value [ 1044.447915][ T5161] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1044.464155][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.498142][T15335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.528586][ T5161] hub 4-1:1.0: bad descriptor, ignoring hub [ 1044.553655][ T5161] hub: probe of 4-1:1.0 failed with error -5 [ 1044.584750][ T5161] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1044.665411][ T5161] cdc_wdm 4-1:1.0: Unknown control protocol [ 1044.744187][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:47 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:47 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:47 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6c) 14:16:47 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xde00) 14:16:47 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1045.477225][T15363] usb 4-1: reset low-speed USB device number 51 using dummy_hcd [ 1045.518513][T15389] overlayfs: unrecognized mount option "{" or missing value [ 1046.007913][T15335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 14:16:52 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:16:52 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6d) 14:16:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xe002) 14:16:52 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:52 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1050.609366][ T5161] usb 4-1: USB disconnect, device number 51 [ 1050.782877][T15414] overlayfs: unrecognized mount option "{" or missing value [ 1051.256731][ T5161] usb 4-1: new low-speed USB device number 52 using dummy_hcd 14:16:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xec03) 14:16:53 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6e) 14:16:53 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1051.637227][ T5161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.668556][ T5161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1051.787156][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1051.797629][ T5161] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1051.810081][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.837816][T15417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1051.879929][ T5161] hub 4-1:1.0: bad descriptor, ignoring hub [ 1051.898597][ T5161] hub: probe of 4-1:1.0 failed with error -5 14:16:54 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1051.925958][ T5161] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device 14:16:54 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1051.971897][T15431] overlayfs: unrecognized mount option "{" or missing value [ 1051.978001][ T5161] cdc_wdm 4-1:1.0: Unknown control protocol [ 1052.265922][T15435] overlayfs: unrecognized mount option "{" or missing value 14:16:54 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd6f) [ 1052.758506][T15417] usb 4-1: reset low-speed USB device number 52 using dummy_hcd [ 1053.247099][T15440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1053.587915][ T5195] usb 4-1: USB disconnect, device number 52 [ 1054.118092][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.124467][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 14:17:00 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf000) 14:17:00 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:00 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:00 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd70) 14:17:00 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1057.950973][T15477] overlayfs: unrecognized mount option "{" or missing value [ 1057.988628][T15472] overlayfs: unrecognized mount option "{" or missing value [ 1058.038460][T15478] overlayfs: unrecognized mount option "{" or missing value 14:17:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf60f) 14:17:01 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd71) 14:17:01 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:01 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:01 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1059.099863][T15496] overlayfs: unrecognized mount option "{" or missing value 14:17:01 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1059.179306][T15495] overlayfs: unrecognized mount option "{" or missing value [ 1059.523880][T15498] overlayfs: unrecognized mount option "{" or missing value 14:17:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfa03) 14:17:01 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd72) [ 1059.586263][T15507] overlayfs: unrecognized mount option "{" or missing value 14:17:02 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:02 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:02 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:02 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd73) [ 1060.876371][T15529] overlayfs: unrecognized mount option "{" or missing value [ 1060.923170][T15534] overlayfs: missing 'lowerdir' 14:17:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfeff) [ 1061.040626][T15527] overlayfs: unrecognized mount option "{" or missing value [ 1061.081538][T15531] overlayfs: unrecognized mount option "{" or missing value 14:17:04 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd74) 14:17:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xff0f) 14:17:04 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:04 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:04 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:04 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1062.247955][T15564] overlayfs: unrecognized mount option "{" or missing value [ 1062.284055][T15562] overlayfs: missing 'lowerdir' [ 1062.368323][T15565] overlayfs: unrecognized mount option "{" or missing value [ 1062.554482][T15571] overlayfs: missing 'lowerdir' 14:17:05 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd75) 14:17:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xff7f) 14:17:05 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:05 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:05 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:05 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1063.570349][T15583] overlayfs: missing 'lowerdir' [ 1063.692438][T15594] overlayfs: unrecognized mount option "{" or missing value 14:17:06 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd76) [ 1063.791320][T15598] overlayfs: unrecognized mount option "{" or missing value [ 1063.840918][T15599] overlayfs: unrecognized mount option "{" or missing value 14:17:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xfffe) 14:17:06 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1064.624367][T15610] overlayfs: missing 'lowerdir' 14:17:07 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd77) 14:17:07 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:07 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8be) [ 1064.975497][T15623] overlayfs: missing 'lowerdir' [ 1065.094324][T15631] overlayfs: unrecognized mount option "{" or missing value [ 1065.121098][T15628] overlayfs: unrecognized mount option "{" or missing value 14:17:07 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:08 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd78) [ 1065.652591][T15638] overlayfs: missing 'lowerdir' 14:17:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8bf) 14:17:08 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:08 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:17:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1066.293628][T15644] overlayfs: missing 'lowerdir' 14:17:08 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1066.500858][T15657] overlayfs: unrecognized mount option "{" or missing value 14:17:08 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd79) [ 1066.656796][ T5159] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1066.756539][T15666] overlayfs: missing 'lowerdir' 14:17:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c0) 14:17:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1067.077843][ T5159] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.114046][ T5159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.139598][ T5159] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1067.215169][ T5159] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1067.257862][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.298145][T15652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1067.319788][ T5159] hub 4-1:1.0: bad descriptor, ignoring hub [ 1067.327461][ T5159] hub: probe of 4-1:1.0 failed with error -5 [ 1067.355169][ T5159] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1067.385924][T15672] overlayfs: unrecognized mount option "{" or missing value [ 1067.397284][ T5159] cdc_wdm 4-1:1.0: Unknown control protocol 14:17:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7a) 14:17:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:10 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1067.743420][T15683] overlayfs: unrecognized mount option "{" or missing value 14:17:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c1) [ 1067.849201][T15690] overlayfs: missing 'lowerdir' 14:17:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1068.197570][T15652] usb 4-1: reset low-speed USB device number 53 using dummy_hcd 14:17:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7b) [ 1068.378801][T15698] overlayfs: unrecognized mount option "{" or missing value [ 1068.758195][T15685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 14:17:15 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c2) 14:17:15 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:15 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:15 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:15 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7c) [ 1073.239134][T14061] usb 4-1: USB disconnect, device number 53 [ 1073.422429][T15728] overlayfs: unrecognized mount option "{" or missing value [ 1073.459388][T15727] overlayfs: unrecognized mount option "{" or missing value [ 1073.486789][T15731] overlayfs: missing 'lowerdir' [ 1073.497993][T15729] overlayfs: unrecognized mount option "{" or missing value 14:17:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7d) 14:17:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c3) 14:17:16 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:16 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:16 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1074.591815][T15742] overlayfs: missing 'lowerdir' 14:17:16 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 1074.792703][T15755] overlayfs: unrecognized mount option "{" or missing value [ 1074.831182][T15754] overlayfs: unrecognized mount option "{" or missing value [ 1074.976997][T14061] usb 2-1: new low-speed USB device number 104 using dummy_hcd 14:17:17 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c4) 14:17:17 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7e) 14:17:17 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1075.347291][T14061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.398043][T14061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1075.515036][T14061] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1075.530025][T15766] overlayfs: missing 'lowerdir' [ 1075.587548][T14061] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1075.628005][T14061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.746997][T15747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 14:17:18 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1075.788530][T14061] hub 2-1:1.0: bad descriptor, ignoring hub [ 1075.799053][T14061] hub: probe of 2-1:1.0 failed with error -5 [ 1075.879479][T14061] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1075.885426][T14061] cdc_wdm 2-1:1.0: Unknown control protocol 14:17:18 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c5) 14:17:18 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd7f) [ 1076.155670][T15782] overlayfs: unrecognized mount option "{" or missing value 14:17:18 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1076.487751][T15789] overlayfs: missing 'lowerdir' [ 1076.597800][T15747] usb 2-1: reset low-speed USB device number 104 using dummy_hcd 14:17:19 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c6) 14:17:19 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd80) 14:17:19 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 1077.138637][T15777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1077.346743][ T26] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 1077.518133][ T5159] usb 2-1: USB disconnect, device number 104 [ 1077.712943][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.723872][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.732883][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1077.742897][ T26] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1077.752068][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.777441][T15796] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1077.799121][ T26] hub 4-1:1.0: bad descriptor, ignoring hub [ 1077.805070][ T26] hub: probe of 4-1:1.0 failed with error -5 [ 1077.822944][ T26] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1077.829911][ T26] cdc_wdm 4-1:1.0: Unknown control protocol [ 1078.188159][ T5161] usb 4-1: USB disconnect, device number 54 14:17:24 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 14:17:24 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:24 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c7) 14:17:24 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd81) [ 1081.804209][T15796] cdc_wdm 2-1:1.0: Error autopm - -16 14:17:24 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 1082.052026][T15817] overlayfs: missing 'lowerdir' [ 1082.122609][T15817] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1082.187520][ T5177] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 1082.437672][ T5161] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 1082.556882][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.592004][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 14:17:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c8) 14:17:25 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd82) [ 1082.645418][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1082.728232][ T5177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1082.775647][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.827231][T15812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1082.848048][ T5161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.869000][ T5177] hub 2-1:1.0: bad descriptor, ignoring hub [ 1082.880419][ T5177] hub: probe of 2-1:1.0 failed with error -5 [ 1082.897105][ T5161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1082.943278][ T5177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1082.973749][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1082.996151][ T5177] cdc_wdm 2-1:1.0: Unknown control protocol [ 1083.057351][ T5161] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1083.139541][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.237584][T15820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1083.258832][ T5161] hub 4-1:1.0: bad descriptor, ignoring hub 14:17:25 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1083.283869][ T5161] hub: probe of 4-1:1.0 failed with error -5 14:17:25 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1083.536499][T15845] overlayfs: missing 'lowerdir' 14:17:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8c9) 14:17:25 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd83) [ 1083.717931][T15812] usb 2-1: reset low-speed USB device number 105 using dummy_hcd [ 1084.237354][T15832] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.297687][ T5161] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1084.308812][ T5161] cdc_wdm 4-1:1.0: Unknown control protocol [ 1084.498006][T14061] usb 2-1: USB disconnect, device number 105 [ 1084.747909][ T5161] usb 4-1: reset low-speed USB device number 55 using dummy_hcd 14:17:27 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:27 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd84) 14:17:27 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:17:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8ca) 14:17:27 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:17:27 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 1085.219956][T15876] overlayfs: missing 'lowerdir' [ 1085.224464][T15874] overlayfs: missing 'lowerdir' [ 1085.677335][T15859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 14:17:28 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd85) 14:17:28 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8cb) 14:17:28 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1086.070337][ T5165] usb 4-1: USB disconnect, device number 55 14:17:28 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[], 0x0) [ 1086.293166][T15884] overlayfs: missing 'lowerdir' 14:17:28 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1086.506926][ T5165] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 1086.564874][T15895] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1086.617647][T14061] usb 1-1: new low-speed USB device number 51 using dummy_hcd 14:17:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8cc) 14:17:29 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd86) [ 1086.877749][ T5165] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.946491][ T5165] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1086.986942][T14061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.997176][ T5165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1087.007245][T14061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.016172][ T5165] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1087.038204][T14061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 4 [ 1087.087401][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.114825][T14061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13368, setting to 0 [ 1087.176934][T15859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1087.202800][T14061] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1087.217952][ T5165] hub 4-1:1.0: bad descriptor, ignoring hub [ 1087.229322][ T5165] hub: probe of 4-1:1.0 failed with error -5 [ 1087.254670][T14061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.263440][ T5165] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1087.277071][ T5165] cdc_wdm 4-1:1.0: Unknown control protocol [ 1087.318293][T14061] hub 1-1:1.0: bad descriptor, ignoring hub 14:17:29 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1087.365374][T14061] hub: probe of 1-1:1.0 failed with error -5 [ 1087.404164][T14061] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1087.473324][ T5159] usb 4-1: USB disconnect, device number 56 14:17:29 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1087.586954][T15889] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1087.611651][T15907] overlayfs: unrecognized mount option "{" or missing value [ 1087.624353][T15889] bond5 (uninitialized): Released all slaves 14:17:30 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8cd) 14:17:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd87) [ 1087.777914][T14061] usb 1-1: USB disconnect, device number 51 [ 1087.806470][T15913] overlayfs: unrecognized mount option "{" or missing value 14:17:30 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1088.138229][T14061] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1088.178363][T15924] overlayfs: unrecognized mount option "{" or missing value [ 1088.527458][T14061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.552474][T14061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1088.602767][T14061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 4 14:17:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8ce) 14:17:31 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd88) [ 1088.649523][T14061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13368, setting to 0 [ 1088.667165][T14061] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1088.676416][T14061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.727583][T14061] hub 1-1:1.0: bad descriptor, ignoring hub [ 1088.743230][T14061] hub: probe of 1-1:1.0 failed with error -5 14:17:31 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1088.804595][T14061] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1089.057634][T15935] overlayfs: unrecognized mount option "{" or missing value [ 1089.108601][ T5161] usb 1-1: USB disconnect, device number 52 14:17:31 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:31 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:31 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8cf) 14:17:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd89) [ 1089.715941][T15947] overlayfs: unrecognized mount option "{" or missing value [ 1089.808919][T15945] overlayfs: unrecognized mount option "{" or missing value [ 1089.944177][T15954] overlayfs: unrecognized mount option "{" or missing value 14:17:32 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1090.461966][T15962] overlayfs: unrecognized mount option "{" or missing value 14:17:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d0) 14:17:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8a) 14:17:33 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:33 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1091.171217][T15972] overlayfs: unrecognized mount option "{" or missing value 14:17:33 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1091.290900][T15978] overlayfs: unrecognized mount option "{" or missing value 14:17:33 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:33 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8b) 14:17:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d1) [ 1091.590624][T15989] overlayfs: unrecognized mount option "{" or missing value [ 1091.632480][T15992] overlayfs: unrecognized mount option "{" or missing value 14:17:34 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:34 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:34 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8c) 14:17:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d2) [ 1092.556246][T16001] overlayfs: unrecognized mount option "{" or missing value 14:17:35 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1092.823305][T16012] overlayfs: unrecognized mount option "{" or missing value 14:17:35 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r5, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1092.957412][T16017] overlayfs: unrecognized mount option "{" or missing value [ 1093.222591][T16022] overlayfs: unrecognized mount option "{" or missing value 14:17:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8d) 14:17:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d3) 14:17:35 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0xf) 14:17:36 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4) [ 1093.695948][T16032] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 14:17:36 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1093.921335][T16035] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1094.073386][T16040] overlayfs: unrecognized mount option "{" or missing value 14:17:36 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e092c01c5572eadb7ffff65302030202a1758207b0a"], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, &(0x7f0000000280)='{\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:17:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8e) 14:17:36 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 1) 14:17:36 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d4) [ 1094.543177][T16053] overlayfs: unrecognized mount option "{" or missing value 14:17:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x4) [ 1094.667707][T16056] overlayfs: missing 'lowerdir' [ 1094.751576][T16058] FAULT_INJECTION: forcing a failure. [ 1094.751576][T16058] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.765739][T16058] CPU: 0 PID: 16058 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1094.776206][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1094.786298][T16058] Call Trace: [ 1094.789604][T16058] [ 1094.792565][T16058] dump_stack_lvl+0xd1/0x138 [ 1094.797209][T16058] should_fail_ex.cold+0x5/0xa [ 1094.802037][T16058] should_failslab+0x9/0x20 [ 1094.806592][T16058] __kmem_cache_alloc_node+0x5b/0x430 [ 1094.811992][T16058] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1094.817835][T16058] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1094.823592][T16058] __kmalloc+0x4a/0xd0 [ 1094.827684][T16058] tomoyo_realpath_from_path+0xc3/0x600 [ 1094.833272][T16058] ? tomoyo_profile+0x46/0x60 [ 1094.837979][T16058] tomoyo_path_number_perm+0x217/0x570 [ 1094.843488][T16058] ? tomoyo_path_number_perm+0x1c1/0x570 [ 1094.849172][T16058] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1094.855042][T16058] ? xfd_validate_state+0x5d/0x180 [ 1094.860189][T16058] ? __fget_files+0x26a/0x440 [ 1094.864914][T16058] security_file_ioctl+0x54/0xb0 [ 1094.869873][T16058] __x64_sys_ioctl+0xb7/0x210 [ 1094.874638][T16058] do_syscall_64+0x39/0xb0 [ 1094.879088][T16058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1094.885000][T16058] RIP: 0033:0x7fbe8748c0a9 [ 1094.889431][T16058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1094.909066][T16058] RSP: 002b:00007fbe85ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.917502][T16058] RAX: ffffffffffffffda RBX: 00007fbe875ac120 RCX: 00007fbe8748c0a9 [ 1094.925500][T16058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1094.933487][T16058] RBP: 00007fbe85ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.941479][T16058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.949461][T16058] R13: 00007fbe876cfb1f R14: 00007fbe85ffe300 R15: 0000000000022000 [ 1094.957460][T16058] [ 1094.972403][T16058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1094.995119][T16060] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 14:17:37 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) 14:17:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd8f) 14:17:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d5) 14:17:37 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 2) 14:17:37 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 1) [ 1095.557759][ T5165] usb 2-1: new low-speed USB device number 106 using dummy_hcd 14:17:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) (fail_nth: 1) [ 1095.661710][T16076] overlayfs: missing 'lowerdir' [ 1095.686401][T16076] FAULT_INJECTION: forcing a failure. [ 1095.686401][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.699824][T16076] CPU: 0 PID: 16076 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1095.710270][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1095.720342][T16076] Call Trace: [ 1095.723631][T16076] [ 1095.726574][T16076] dump_stack_lvl+0xd1/0x138 [ 1095.731198][T16076] should_fail_ex.cold+0x5/0xa [ 1095.735975][T16076] should_failslab+0x9/0x20 [ 1095.740488][T16076] __kmem_cache_alloc_node+0x5b/0x430 [ 1095.745899][T16076] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1095.751297][T16076] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1095.756717][T16076] __kmalloc+0x4a/0xd0 [ 1095.760822][T16076] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1095.766028][T16076] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1095.771644][T16076] tomoyo_encode+0x2c/0x50 [ 1095.776068][T16076] tomoyo_realpath_from_path+0x185/0x600 [ 1095.781709][T16076] ? tomoyo_profile+0x46/0x60 [ 1095.786391][T16076] tomoyo_path_number_perm+0x217/0x570 [ 1095.791852][T16076] ? tomoyo_path_number_perm+0x1c1/0x570 [ 1095.797507][T16076] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1095.803380][T16076] ? xfd_validate_state+0x5d/0x180 [ 1095.808519][T16076] ? __fget_files+0x26a/0x440 [ 1095.813195][T16076] security_file_ioctl+0x54/0xb0 [ 1095.818139][T16076] __x64_sys_ioctl+0xb7/0x210 [ 1095.822828][T16076] do_syscall_64+0x39/0xb0 [ 1095.827330][T16076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1095.833249][T16076] RIP: 0033:0x7fbe8748c0a9 [ 1095.837673][T16076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1095.857315][T16076] RSP: 002b:00007fbe8810b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.865749][T16076] RAX: ffffffffffffffda RBX: 00007fbe875ac050 RCX: 00007fbe8748c0a9 [ 1095.873716][T16076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1095.881684][T16076] RBP: 00007fbe8810b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.889652][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.897640][T16076] R13: 00007fbe876cfb1f R14: 00007fbe8810b300 R15: 0000000000022000 [ 1095.905639][T16076] [ 1095.922958][T16076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1095.932734][T16085] FAULT_INJECTION: forcing a failure. [ 1095.932734][T16085] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1095.937296][ T5165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.959752][T16085] CPU: 1 PID: 16085 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1095.970244][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1095.980318][T16085] Call Trace: [ 1095.983603][T16085] [ 1095.986557][T16085] dump_stack_lvl+0xd1/0x138 [ 1095.991221][T16085] should_fail_ex.cold+0x5/0xa [ 1095.996012][T16085] _copy_to_user+0x2e/0x150 [ 1096.000586][T16085] simple_read_from_buffer+0xd0/0x160 [ 1096.006010][T16085] proc_fail_nth_read+0x18b/0x220 [ 1096.011096][T16085] ? proc_fault_inject_read+0x220/0x220 [ 1096.016684][T16085] ? security_file_permission+0xaf/0xd0 [ 1096.022292][T16085] vfs_read+0x25b/0x930 [ 1096.026540][T16085] ? proc_fault_inject_read+0x220/0x220 [ 1096.032135][T16085] ? kernel_read+0x1c0/0x1c0 [ 1096.036770][T16085] ? __fget_files+0x26a/0x440 [ 1096.041503][T16085] ksys_read+0x12b/0x250 [ 1096.045789][T16085] ? vfs_write+0xdd0/0xdd0 [ 1096.050250][T16085] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1096.056187][T16085] do_syscall_64+0x39/0xb0 [ 1096.060658][T16085] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1096.066587][T16085] RIP: 0033:0x7f7225a3decc [ 1096.071031][T16085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1096.090669][T16085] RSP: 002b:00007f722670e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.099113][T16085] RAX: ffffffffffffffda RBX: 00007f7225bac120 RCX: 00007f7225a3decc [ 1096.107120][T16085] RDX: 000000000000000f RSI: 00007f722670e1e0 RDI: 0000000000000005 [ 1096.115111][T16085] RBP: 00007f722670e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.123090][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.131094][T16085] R13: 00007f7225ccfb1f R14: 00007f722670e300 R15: 0000000000022000 [ 1096.139128][T16085] [ 1096.154765][T16086] overlayfs: missing 'lowerdir' [ 1096.164250][T16089] FAULT_INJECTION: forcing a failure. [ 1096.164250][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1096.182870][T16089] CPU: 0 PID: 16089 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1096.193320][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1096.203385][T16089] Call Trace: [ 1096.206681][T16089] [ 1096.209617][T16089] dump_stack_lvl+0xd1/0x138 [ 1096.214260][T16089] should_fail_ex.cold+0x5/0xa [ 1096.219040][T16089] _copy_to_user+0x2e/0x150 [ 1096.223548][T16089] simple_read_from_buffer+0xd0/0x160 [ 1096.228938][T16089] proc_fail_nth_read+0x18b/0x220 [ 1096.233993][T16089] ? proc_fault_inject_read+0x220/0x220 [ 1096.239540][T16089] ? security_file_permission+0xaf/0xd0 [ 1096.245093][T16089] vfs_read+0x25b/0x930 [ 1096.249259][T16089] ? proc_fault_inject_read+0x220/0x220 [ 1096.254830][T16089] ? kernel_read+0x1c0/0x1c0 [ 1096.259443][T16089] ? __fget_files+0x26a/0x440 [ 1096.264155][T16089] ksys_read+0x12b/0x250 [ 1096.268414][T16089] ? vfs_write+0xdd0/0xdd0 [ 1096.272852][T16089] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1096.278775][T16089] do_syscall_64+0x39/0xb0 [ 1096.283227][T16089] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1096.289145][T16089] RIP: 0033:0x7f3e26e3decc [ 1096.293579][T16089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1096.313217][T16089] RSP: 002b:00007f3e27bea160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.321651][T16089] RAX: ffffffffffffffda RBX: 00007f3e26fac390 RCX: 00007f3e26e3decc [ 1096.329636][T16089] RDX: 000000000000000f RSI: 00007f3e27bea1e0 RDI: 000000000000000a 14:17:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d6) [ 1096.337621][T16089] RBP: 00007f3e27bea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.345614][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.353601][T16089] R13: 00007f3e270cfb1f R14: 00007f3e27bea300 R15: 0000000000022000 [ 1096.361618][T16089] 14:17:38 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd90) [ 1096.411372][ T5165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.425893][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1096.436859][ T5165] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1096.446103][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:17:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 1096.478345][T16062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1096.497975][ T5165] hub 2-1:1.0: bad descriptor, ignoring hub [ 1096.504938][ T5165] hub: probe of 2-1:1.0 failed with error -5 14:17:38 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1096.545394][ T5165] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1096.561225][ T5165] cdc_wdm 2-1:1.0: Unknown control protocol 14:17:38 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1096.702694][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.738462][T16062] bond17 (uninitialized): Released all slaves [ 1096.749089][T16062] FAULT_INJECTION: forcing a failure. [ 1096.749089][T16062] name failslab, interval 1, probability 0, space 0, times 0 14:17:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) kcmp(r3, 0x0, 0x0, r4, r6) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 1096.846442][T16111] overlayfs: missing 'lowerdir' [ 1096.855299][T16062] CPU: 1 PID: 16062 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1096.865724][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1096.875777][T16062] Call Trace: [ 1096.879052][T16062] [ 1096.881980][T16062] dump_stack_lvl+0xd1/0x138 [ 1096.886577][T16062] should_fail_ex.cold+0x5/0xa [ 1096.891375][T16062] ? getname_flags.part.0+0x50/0x4f0 [ 1096.896663][T16062] should_failslab+0x9/0x20 [ 1096.901166][T16062] kmem_cache_alloc+0x5a/0x430 [ 1096.905927][T16062] ? lock_downgrade+0x6e0/0x6e0 [ 1096.910787][T16062] getname_flags.part.0+0x50/0x4f0 [ 1096.915904][T16062] getname+0x92/0xd0 [ 1096.919805][T16062] do_sys_openat2+0xf5/0x4c0 [ 1096.924469][T16062] ? build_open_flags+0x6f0/0x6f0 [ 1096.929502][T16062] __x64_sys_openat+0x143/0x1f0 [ 1096.934359][T16062] ? __ia32_sys_open+0x1c0/0x1c0 [ 1096.939302][T16062] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1096.945194][T16062] do_syscall_64+0x39/0xb0 [ 1096.949611][T16062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1096.955506][T16062] RIP: 0033:0x7f64c303e234 [ 1096.959927][T16062] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1096.979525][T16062] RSP: 002b:00007f64c3e34ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1096.987932][T16062] RAX: ffffffffffffffda RBX: 00007f64c31abf80 RCX: 00007f64c303e234 [ 1096.995894][T16062] RDX: 0000000000000002 RSI: 00007f64c3e34d40 RDI: 00000000ffffff9c [ 1097.003860][T16062] RBP: 00007f64c3e34d40 R08: 0000000000000000 R09: 000000000000000f [ 1097.011832][T16062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1097.019796][T16062] R13: 00007f64c32cfb1f R14: 00007f64c3e35300 R15: 0000000000022000 [ 1097.027768][T16062] [ 1097.031735][T16110] overlayfs: missing 'lowerdir' [ 1097.297675][ T5159] usb 2-1: USB disconnect, device number 106 14:17:40 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6", @ANYRESDEC], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x1, 0x71, 0x0, 0x0) 14:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) kcmp(r3, 0x0, 0x0, r4, r6) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 14:17:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3f8d7) 14:17:40 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="450000001000010400604ba3bf9d3ea518170000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x59}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000081, 0x3fd91) 14:17:40 executing program 0: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/137, 0x89}], 0x1, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x2, 0x0) 14:17:40 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) preadv(r1, &(0x7f0000000a80), 0x0, 0x0, 0xcc) sendfile(0xffffffffffffffff, r0, 0x0, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) tkill(0x0, 0x26) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x19) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x1000000, 0x0) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x2, 0x0) [ 1097.917858][T16124] ------------[ cut here ]------------ [ 1097.935078][T16124] WARNING: CPU: 0 PID: 16124 at kernel/kthread.c:524 kthread_bind_mask+0x39/0xc0 [ 1097.961353][T16124] Modules linked in: 14:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) kcmp(r3, 0x0, 0x0, r4, r6) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) [ 1097.965564][T16124] CPU: 0 PID: 16124 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1097.976497][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1097.993315][T16124] RIP: 0010:kthread_bind_mask+0x39/0xc0 [ 1098.006570][T16124] Code: fb e8 6b 0a 2d 00 be 02 00 00 00 48 89 df e8 6e 4a 04 00 31 ff 48 89 c5 48 89 c6 e8 21 07 2d 00 48 85 ed 75 12 e8 47 0a 2d 00 <0f> 0b 5b 5d 41 5c 41 5d e9 3a 0a 2d 00 e8 35 0a 2d 00 4c 8d ab 58 [ 1098.012095][T16142] overlayfs: missing 'lowerdir' [ 1098.051830][T16143] overlayfs: missing 'lowerdir' [ 1098.069738][T16124] RSP: 0018:ffffc9000630fbc0 EFLAGS: 00010216 [ 1098.076333][T16124] RAX: 0000000000002091 RBX: ffff8880329d8000 RCX: ffffc90006009000 [ 1098.085046][T16124] RDX: 0000000000040000 RSI: ffffffff81544819 RDI: 0000000000000007 [ 1098.094820][T16124] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1098.103442][T16124] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8e72d658 [ 1098.114480][T16124] R13: ffff88802a916f40 R14: ffff888028fef020 R15: ffff888028fef000 [ 1098.123223][T16124] FS: 00007fbe8812c700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1098.133639][T16124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.141066][T16124] CR2: 0000000000000000 CR3: 000000007d6fe000 CR4: 00000000003526e0 [ 1098.153415][T16124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1098.162965][T16124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1098.172200][T16124] Call Trace: [ 1098.175809][T16124] [ 1098.186351][T16124] init_rescuer+0x141/0x1d0 [ 1098.192083][T16124] alloc_workqueue+0xca3/0x1020 [ 1098.197499][ T5161] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1098.209290][T16124] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1098.215463][T16124] ? init_timer_key+0x18d/0x3e0 [ 1098.221570][T16124] kvm_mmu_init_tdp_mmu+0x92/0x1c0 [ 1098.228988][T16124] kvm_mmu_init_vm+0x12c/0x360 [ 1098.234223][T16124] kvm_arch_init_vm+0x6c/0x750 [ 1098.252999][T16124] ? __kasan_kmalloc+0xa5/0xb0 [ 1098.258446][T16124] kvm_dev_ioctl+0xb04/0x1cd0 [ 1098.265896][T16124] ? kvm_stat_data_open+0x380/0x380 [ 1098.277789][T16124] ? __fget_files+0x26a/0x440 [ 1098.282940][T16124] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1098.289118][T16124] ? kvm_stat_data_open+0x380/0x380 [ 1098.294634][T16124] __x64_sys_ioctl+0x197/0x210 [ 1098.336678][T16124] do_syscall_64+0x39/0xb0 [ 1098.342226][T16124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1098.350009][T16124] RIP: 0033:0x7fbe8748c0a9 [ 1098.354845][T16124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:17:40 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x0, r1}) [ 1098.389963][T16124] RSP: 002b:00007fbe8812c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.399728][T16124] RAX: ffffffffffffffda RBX: 00007fbe875abf80 RCX: 00007fbe8748c0a9 [ 1098.408617][T16124] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1098.424909][T16124] RBP: 00007fbe874e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1098.433997][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.447613][T16124] R13: 00007fbe876cfb1f R14: 00007fbe8812c300 R15: 0000000000022000 [ 1098.458232][T16124] [ 1098.462234][T16124] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1098.469536][T16124] CPU: 0 PID: 16124 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0 [ 1098.479957][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1098.490021][T16124] Call Trace: [ 1098.493310][T16124] [ 1098.496270][T16124] dump_stack_lvl+0xd1/0x138 [ 1098.500907][T16124] panic+0x2cc/0x626 [ 1098.504863][T16124] ? panic_print_sys_info.part.0+0x110/0x110 [ 1098.510862][T16124] ? kthread_bind_mask+0x39/0xc0 [ 1098.515807][T16124] check_panic_on_warn.cold+0x19/0x35 [ 1098.521202][T16124] __warn+0xf2/0x1a0 [ 1098.525106][T16124] ? kthread_bind_mask+0x39/0xc0 [ 1098.530057][T16124] report_bug+0x1c0/0x210 [ 1098.534444][T16124] handle_bug+0x3c/0x70 [ 1098.538645][T16124] exc_invalid_op+0x18/0x50 [ 1098.543196][T16124] asm_exc_invalid_op+0x1a/0x20 [ 1098.548093][T16124] RIP: 0010:kthread_bind_mask+0x39/0xc0 [ 1098.553677][T16124] Code: fb e8 6b 0a 2d 00 be 02 00 00 00 48 89 df e8 6e 4a 04 00 31 ff 48 89 c5 48 89 c6 e8 21 07 2d 00 48 85 ed 75 12 e8 47 0a 2d 00 <0f> 0b 5b 5d 41 5c 41 5d e9 3a 0a 2d 00 e8 35 0a 2d 00 4c 8d ab 58 [ 1098.573308][T16124] RSP: 0018:ffffc9000630fbc0 EFLAGS: 00010216 [ 1098.579411][T16124] RAX: 0000000000002091 RBX: ffff8880329d8000 RCX: ffffc90006009000 [ 1098.587392][T16124] RDX: 0000000000040000 RSI: ffffffff81544819 RDI: 0000000000000007 [ 1098.595365][T16124] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1098.603417][T16124] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8e72d658 [ 1098.611395][T16124] R13: ffff88802a916f40 R14: ffff888028fef020 R15: ffff888028fef000 [ 1098.619376][T16124] ? kthread_bind_mask+0x39/0xc0 [ 1098.624336][T16124] init_rescuer+0x141/0x1d0 [ 1098.628865][T16124] alloc_workqueue+0xca3/0x1020 [ 1098.633719][T16124] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1098.639448][T16124] ? init_timer_key+0x18d/0x3e0 [ 1098.644345][T16124] kvm_mmu_init_tdp_mmu+0x92/0x1c0 [ 1098.649493][T16124] kvm_mmu_init_vm+0x12c/0x360 [ 1098.654271][T16124] kvm_arch_init_vm+0x6c/0x750 [ 1098.659043][T16124] ? __kasan_kmalloc+0xa5/0xb0 [ 1098.663833][T16124] kvm_dev_ioctl+0xb04/0x1cd0 [ 1098.668537][T16124] ? kvm_stat_data_open+0x380/0x380 [ 1098.673749][T16124] ? __fget_files+0x26a/0x440 [ 1098.678467][T16124] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1098.683434][T16124] ? kvm_stat_data_open+0x380/0x380 [ 1098.688665][T16124] __x64_sys_ioctl+0x197/0x210 [ 1098.693451][T16124] do_syscall_64+0x39/0xb0 [ 1098.697885][T16124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1098.703784][T16124] RIP: 0033:0x7fbe8748c0a9 [ 1098.708195][T16124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1098.727800][T16124] RSP: 002b:00007fbe8812c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.736211][T16124] RAX: ffffffffffffffda RBX: 00007fbe875abf80 RCX: 00007fbe8748c0a9 [ 1098.744180][T16124] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1098.752152][T16124] RBP: 00007fbe874e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1098.760121][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.768086][T16124] R13: 00007fbe876cfb1f R14: 00007fbe8812c300 R15: 0000000000022000 [ 1098.776063][T16124] [ 1098.779246][T16124] Kernel Offset: disabled [ 1098.783724][T16124] Rebooting in 86400 seconds..