00000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 192.771509][ T30] audit: type=1401 audit(1847638833.443:251): op=setxattr invalid_context="" [ 192.827354][ T2572] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 192.836978][ T6138] 9pnet: Insufficient options for proto=fd [ 192.867441][ T26] cp2112 0003:10C4:EA90.0047: error reading lock byte: -71 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f0000000300)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) [ 192.875825][ T26] usb 3-1: USB disconnect, device number 25 [ 192.977453][ T60] usb 5-1: new high-speed USB device number 24 using dummy_hcd executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000200)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ftruncate(r0, 0x81fd) io_submit(r1, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 193.227463][ T2572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.239017][ T2572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.245343][ T30] audit: type=1401 audit(1847638833.913:252): op=setxattr invalid_context="" [ 193.248959][ T2572] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 193.266708][ T2572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="005e86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x0, 0x0, 0x2, '%{'}, 0x0, 0x0}) [ 193.277634][ T2572] usb 2-1: config 0 descriptor?? [ 193.286424][ T30] audit: type=1401 audit(1847638833.953:253): op=setxattr invalid_context="" executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000200)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ftruncate(r0, 0x81fd) io_submit(r1, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) [ 193.377397][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.390555][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.400366][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 193.409445][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.417832][ T60] usb 5-1: config 0 descriptor?? executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 193.530241][ T30] audit: type=1401 audit(1847638834.203:254): op=setxattr invalid_context="" executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 193.577329][ T6] usb 4-1: new high-speed USB device number 25 using dummy_hcd executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000200)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ftruncate(r0, 0x81fd) io_submit(r1, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 193.758478][ T2572] logitech-hidpp-device 0003:046D:C086.0048: item fetching failed at offset 1/5 [ 193.767445][ T2572] logitech-hidpp-device 0003:046D:C086.0048: hidpp_probe:parse failed [ 193.775410][ T2572] logitech-hidpp-device: probe of 0003:046D:C086.0048 failed with error -22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "bbcc2580"}, @global=@item_4={0x3, 0x1, 0x0, "76e70664"}]}}, 0x0}, 0x0) [ 193.838014][ T30] audit: type=1401 audit(1847638834.513:255): op=setxattr invalid_context="" [ 193.867329][ T324] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 193.937375][ T6] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 193.948500][ T6] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 193.959611][ T6] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 193.968436][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.968694][ T26] usb 2-1: USB disconnect, device number 23 [ 193.987395][ T6155] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 194.027396][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 194.033264][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 194.039937][ T60] usb 5-1: USB disconnect, device number 24 [ 194.107335][ T324] usb 3-1: Using ep0 maxpacket: 16 [ 194.127327][ T2572] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 194.227460][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.238349][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.247908][ T324] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 194.256733][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.264985][ T324] usb 3-1: config 0 descriptor?? [ 194.367327][ T2572] usb 1-1: Using ep0 maxpacket: 16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 194.507652][ T2572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.520526][ T2572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.530182][ T2572] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 194.539003][ T6183] 9pnet: Insufficient options for proto=fd [ 194.539764][ T2572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 194.554740][ T2572] usb 1-1: config 0 descriptor?? [ 194.747895][ T324] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 194.754743][ T324] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 194.761496][ T324] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 194.768314][ T324] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 194.775685][ T324] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 194.777331][ T60] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 194.783227][ T324] cp2112 0003:10C4:EA90.0049: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 194.847325][ T20] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 194.967389][ T324] cp2112 0003:10C4:EA90.0049: Part Number: 0xA7 Device Version: 0x96 [ 195.028027][ T2572] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 195.034725][ T2572] ntrig 0003:1B96:0004.004A: item fetching failed at offset 5/7 [ 195.042185][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 195.047252][ T2572] ntrig 0003:1B96:0004.004A: parse failed [ 195.052803][ T2572] ntrig: probe of 0003:1B96:0004.004A failed with error -22 [ 195.087334][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 195.207402][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.218131][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.227674][ T20] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 195.236471][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.236628][ T2572] usb 1-1: USB disconnect, device number 27 [ 195.245027][ T20] usb 5-1: config 0 descriptor?? [ 195.337384][ T60] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 195.346275][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.354169][ T60] usb 2-1: Product: syz [ 195.358143][ T60] usb 2-1: Manufacturer: syz [ 195.362550][ T60] usb 2-1: SerialNumber: syz [ 195.367498][ T60] usb 2-1: config 0 descriptor?? [ 195.457387][ T6] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 195.464673][ T6] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input52 [ 195.627386][ T324] cp2112 0003:10C4:EA90.0049: error reading lock byte: -71 [ 195.635332][ T324] usb 3-1: USB disconnect, device number 26 [ 195.658056][ T323] usb 4-1: USB disconnect, device number 25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) [ 195.727912][ T20] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 195.734797][ T20] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 195.741615][ T20] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 195.748310][ T20] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 195.755069][ T20] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 195.762379][ T20] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 195.857464][ T60] usb 2-1: MIDIStreaming interface descriptor not found [ 195.868976][ T60] usb 2-1: USB disconnect, device number 24 [ 195.879873][ T30] audit: type=1401 audit(1847638836.553:256): op=setxattr invalid_context="" [ 195.937412][ T20] cp2112 0003:10C4:EA90.004B: Part Number: 0xA7 Device Version: 0x96 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "bbcc2580"}, @global=@item_4={0x3, 0x1, 0x0, "76e70664"}]}}, 0x0}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 196.187328][ T323] usb 1-1: new high-speed USB device number 28 using dummy_hcd executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 196.242409][ T30] audit: type=1401 audit(1847638836.913:257): op=setxattr invalid_context="" [ 196.259011][ T6206] 9pnet: Insufficient options for proto=fd executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="005e86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x0, 0x0, 0x2, '%{'}, 0x0, 0x0}) [ 196.447327][ T324] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 196.547333][ T6] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.597366][ T20] cp2112 0003:10C4:EA90.004B: error reading lock byte: -71 [ 196.605328][ T20] usb 5-1: USB disconnect, device number 25 [ 196.617320][ T359] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 196.687325][ T324] usb 3-1: Using ep0 maxpacket: 16 [ 196.787350][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 196.807632][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.818389][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.827969][ T324] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 196.836786][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.837389][ T323] usb 1-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 196.845515][ T324] usb 3-1: config 0 descriptor?? [ 196.853490][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.853511][ T323] usb 1-1: Product: syz [ 196.853523][ T323] usb 1-1: Manufacturer: syz [ 196.874456][ T323] usb 1-1: SerialNumber: syz [ 196.879645][ T323] usb 1-1: config 0 descriptor?? [ 196.907393][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.918351][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.927916][ T6] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 196.936735][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.937875][ T323] usb 1-1: bad CDC descriptors [ 196.945213][ T6] usb 4-1: config 0 descriptor?? [ 196.997393][ T359] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 197.008480][ T359] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 197.019455][ T359] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 197.028552][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) [ 197.047373][ T6212] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') [ 197.102775][ T6214] 9pnet: Insufficient options for proto=fd executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 197.143549][ T20] usb 1-1: USB disconnect, device number 28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) [ 197.198294][ T30] audit: type=1401 audit(1847638837.873:258): op=setxattr invalid_context="" [ 197.213784][ T6220] 9pnet: Insufficient options for proto=fd [ 197.337920][ T324] ntrig 0003:1B96:0004.004C: unknown main item tag 0x0 [ 197.344658][ T324] ntrig 0003:1B96:0004.004C: item fetching failed at offset 5/7 [ 197.352315][ T324] ntrig 0003:1B96:0004.004C: parse failed [ 197.357885][ T324] ntrig: probe of 0003:1B96:0004.004C failed with error -22 [ 197.427970][ T6] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 197.434734][ T6] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 197.441529][ T6] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 197.448307][ T6] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 197.455043][ T6] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 197.462236][ T6] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 197.517327][ T323] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 197.543120][ T324] usb 3-1: USB disconnect, device number 27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "bbcc2580"}, @global=@item_4={0x3, 0x1, 0x0, "76e70664"}]}}, 0x0}, 0x0) [ 197.637387][ T6] cp2112 0003:10C4:EA90.004D: Part Number: 0xA7 Device Version: 0x96 [ 197.767561][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 197.927349][ T60] usb 1-1: new high-speed USB device number 29 using dummy_hcd executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 198.087511][ T323] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 198.096387][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.104220][ T323] usb 5-1: Product: syz [ 198.108162][ T323] usb 5-1: Manufacturer: syz [ 198.112573][ T323] usb 5-1: SerialNumber: syz [ 198.117599][ T323] usb 5-1: config 0 descriptor?? [ 198.177337][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 198.297361][ T6] cp2112 0003:10C4:EA90.004D: error reading lock byte: -71 [ 198.297365][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.297389][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.305603][ T6] usb 4-1: USB disconnect, device number 26 [ 198.315177][ T60] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 198.339219][ T26] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 198.346601][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.354952][ T60] usb 1-1: config 0 descriptor?? [ 198.527366][ T359] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 198.534757][ T359] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input53 [ 198.607358][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 198.617564][ T323] usb 5-1: MIDIStreaming interface descriptor not found [ 198.625684][ T323] usb 5-1: USB disconnect, device number 26 [ 198.728259][ T326] usb 2-1: USB disconnect, device number 25 [ 198.737401][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.748246][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.758753][ T26] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 198.767910][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) [ 198.776255][ T26] usb 3-1: config 0 descriptor?? executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') [ 198.798910][ T6229] 9pnet: Insufficient options for proto=fd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 198.847946][ T60] ntrig 0003:1B96:0004.004E: unknown main item tag 0x0 [ 198.854804][ T60] ntrig 0003:1B96:0004.004E: item fetching failed at offset 5/7 [ 198.862360][ T60] ntrig 0003:1B96:0004.004E: parse failed [ 198.867885][ T60] ntrig: probe of 0003:1B96:0004.004E failed with error -22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 198.912225][ T30] audit: type=1401 audit(1847638839.583:259): op=setxattr invalid_context="" [ 198.929218][ T6235] 9pnet: Insufficient options for proto=fd executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 199.053436][ T326] usb 1-1: USB disconnect, device number 29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) [ 199.227329][ T359] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 199.268027][ T26] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 199.274926][ T26] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 199.282076][ T26] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 199.289202][ T26] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 199.296032][ T26] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 199.303517][ T26] cp2112 0003:10C4:EA90.004F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "80477ea8"}]}}, 0x0}, 0x0) [ 199.304542][ T6243] 9pnet: Insufficient options for proto=fd [ 199.377374][ T60] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 199.487372][ T26] cp2112 0003:10C4:EA90.004F: Part Number: 0xA7 Device Version: 0x96 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) [ 199.637329][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 199.637334][ T358] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 199.747386][ T359] usb 4-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 199.756336][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.764393][ T359] usb 4-1: Product: syz [ 199.768639][ T359] usb 4-1: Manufacturer: syz [ 199.773026][ T359] usb 4-1: SerialNumber: syz [ 199.777354][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.778106][ T359] usb 4-1: config 0 descriptor?? [ 199.788315][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.802475][ T60] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 199.811323][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.819643][ T60] usb 5-1: config 0 descriptor?? [ 199.827603][ T359] usb 4-1: bad CDC descriptors [ 199.837323][ T6] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 199.997394][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.008143][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.017667][ T358] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 200.026466][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.034931][ T358] usb 2-1: config 0 descriptor?? [ 200.042215][ T2572] usb 4-1: USB disconnect, device number 27 [ 200.137428][ T26] cp2112 0003:10C4:EA90.004F: error reading lock byte: -71 [ 200.145143][ T26] usb 3-1: USB disconnect, device number 28 [ 200.197387][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.208168][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.217686][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.226478][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.234763][ T6] usb 1-1: config 0 descriptor?? [ 200.328021][ T60] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 200.334789][ T60] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 200.341570][ T60] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 200.348329][ T60] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 200.355087][ T60] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 200.362510][ T60] cp2112 0003:10C4:EA90.0050: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) [ 200.518187][ T358] logitech-hidpp-device 0003:046D:C086.0051: item fetching failed at offset 1/5 [ 200.527139][ T358] logitech-hidpp-device 0003:046D:C086.0051: hidpp_probe:parse failed [ 200.535164][ T358] logitech-hidpp-device: probe of 0003:046D:C086.0051 failed with error -22 [ 200.551237][ T60] cp2112 0003:10C4:EA90.0050: Part Number: 0xA7 Device Version: 0x96 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="005e86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x0, 0x0, 0x2, '%{'}, 0x0, 0x0}) [ 200.738292][ T26] usb 2-1: USB disconnect, device number 26 [ 200.767369][ T60] cp2112 0003:10C4:EA90.0050: error requesting SMBus config [ 200.774871][ T60] cp2112: probe of 0003:10C4:EA90.0050 failed with error -71 [ 200.783040][ T60] usb 5-1: USB disconnect, device number 27 [ 200.817456][ T358] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 200.887327][ T20] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 201.057327][ T358] usb 4-1: Using ep0 maxpacket: 16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 201.247417][ T20] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 201.265196][ T20] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 201.285330][ T20] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 201.294366][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.317748][ T6253] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 201.331376][ T6259] 9pnet: Insufficient options for proto=fd [ 201.337407][ T358] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 201.348947][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.356776][ T358] usb 4-1: Product: syz [ 201.362269][ T358] usb 4-1: Manufacturer: syz [ 201.366689][ T358] usb 4-1: SerialNumber: syz [ 201.372217][ T358] usb 4-1: config 0 descriptor?? [ 201.377417][ T6] uclogic 0003:256C:006D.0052: failed retrieving string descriptor #200: -71 [ 201.386023][ T6] uclogic 0003:256C:006D.0052: failed retrieving pen parameters: -71 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "80477ea8"}]}}, 0x0}, 0x0) executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 201.395778][ T6] uclogic 0003:256C:006D.0052: failed probing pen v2 parameters: -71 [ 201.403707][ T6] uclogic 0003:256C:006D.0052: failed probing parameters: -71 [ 201.411645][ T6] uclogic: probe of 0003:256C:006D.0052 failed with error -71 [ 201.419761][ T6] usb 1-1: USB disconnect, device number 30 [ 201.747327][ T324] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 201.754769][ T359] usb 2-1: new high-speed USB device number 27 using dummy_hcd executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 201.867404][ T358] usb 4-1: MIDIStreaming interface descriptor not found [ 201.876278][ T358] usb 4-1: USB disconnect, device number 28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 201.931293][ T6276] 9pnet: Insufficient options for proto=fd [ 201.997334][ T359] usb 2-1: Using ep0 maxpacket: 16 [ 202.117404][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.128164][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.139735][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.149276][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.158838][ T324] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 202.167688][ T359] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 202.176856][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.184753][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.192995][ T324] usb 5-1: config 0 descriptor?? [ 202.198196][ T359] usb 2-1: config 0 descriptor?? [ 202.277331][ T26] usb 1-1: new high-speed USB device number 31 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 202.388412][ T6287] 9pnet: Insufficient options for proto=fd [ 202.417222][ T6291] 9pnet: Insufficient options for proto=fd executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 202.456611][ T30] audit: type=1401 audit(1847638843.123:260): op=setxattr invalid_context="" [ 202.537336][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 202.678178][ T324] logitech-hidpp-device 0003:046D:C086.0053: item fetching failed at offset 1/5 [ 202.687101][ T324] logitech-hidpp-device 0003:046D:C086.0053: hidpp_probe:parse failed [ 202.695586][ T359] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 202.702359][ T359] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 202.709127][ T359] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 202.715891][ T359] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 202.722664][ T324] logitech-hidpp-device: probe of 0003:046D:C086.0053 failed with error -22 [ 202.731798][ T359] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 202.738577][ T358] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 202.746413][ T359] cp2112 0003:10C4:EA90.0054: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 202.777497][ T20] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 202.784758][ T20] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input54 [ 202.867373][ T26] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 202.876482][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.884582][ T26] usb 1-1: Product: syz [ 202.887419][ T359] cp2112 0003:10C4:EA90.0054: Part Number: 0xA7 Device Version: 0x96 [ 202.888665][ T26] usb 1-1: Manufacturer: syz [ 202.897561][ T20] usb 5-1: USB disconnect, device number 28 [ 202.901270][ T26] usb 1-1: SerialNumber: syz [ 202.911864][ T26] usb 1-1: config 0 descriptor?? [ 202.978215][ T60] usb 3-1: USB disconnect, device number 29 [ 202.987373][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 203.267407][ T358] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 203.276421][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.284646][ T358] usb 4-1: Product: syz [ 203.288595][ T358] usb 4-1: Manufacturer: syz [ 203.293055][ T358] usb 4-1: SerialNumber: syz [ 203.298067][ T358] usb 4-1: config 0 descriptor?? [ 203.327357][ T359] cp2112 0003:10C4:EA90.0054: error setting SMBus config [ 203.334550][ T359] cp2112: probe of 0003:10C4:EA90.0054 failed with error -71 [ 203.342854][ T359] usb 2-1: USB disconnect, device number 27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 203.387429][ T26] usb 1-1: MIDIStreaming interface descriptor not found [ 203.420804][ T6299] 9pnet: Could not find request transport: fd0x0000000000000003 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 203.448821][ T6301] 9pnet: Insufficient options for proto=fd [ 203.464517][ T6303] 9pnet: Insufficient options for proto=fd [ 203.481132][ T6305] 9pnet: Insufficient options for proto=fd executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "80477ea8"}]}}, 0x0}, 0x0) [ 203.524215][ T6313] 9pnet: Could not find request transport: fd0x0000000000000003 [ 203.548646][ T6315] 9pnet: Insufficient options for proto=fd [ 203.565191][ T6317] 9pnet: Insufficient options for proto=fd [ 203.593467][ T359] usb 1-1: USB disconnect, device number 31 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 203.767402][ T358] usb 4-1: MIDIStreaming interface descriptor not found [ 203.774217][ T6] usb 3-1: new high-speed USB device number 30 using dummy_hcd executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 203.826677][ T6323] 9pnet: Insufficient options for proto=fd [ 203.867376][ T26] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 203.969663][ T358] usb 4-1: USB disconnect, device number 29 [ 204.017337][ T6] usb 3-1: Using ep0 maxpacket: 16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 204.110405][ T6327] 9pnet: Could not find request transport: fd0x0000000000000003 [ 204.127391][ T60] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 204.138583][ T6329] 9pnet: Insufficient options for proto=fd [ 204.247398][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.258226][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.267847][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 204.276610][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.285079][ T26] usb 5-1: config 0 descriptor?? [ 204.297376][ T6] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 204.306222][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.314051][ T6] usb 3-1: Product: syz [ 204.318035][ T6] usb 3-1: Manufacturer: syz [ 204.322540][ T6] usb 3-1: SerialNumber: syz [ 204.327649][ T6] usb 3-1: config 0 descriptor?? executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 204.457362][ T2572] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 204.677396][ T60] usb 2-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 204.686392][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.694156][ T60] usb 2-1: Product: syz [ 204.698242][ T60] usb 2-1: Manufacturer: syz [ 204.702547][ T60] usb 2-1: SerialNumber: syz [ 204.707507][ T60] usb 2-1: config 0 descriptor?? [ 204.717328][ T2572] usb 1-1: Using ep0 maxpacket: 16 [ 204.768242][ T26] logitech-hidpp-device 0003:046D:C086.0055: item fetching failed at offset 1/5 [ 204.777166][ T26] logitech-hidpp-device 0003:046D:C086.0055: hidpp_probe:parse failed [ 204.785090][ T323] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 204.792826][ T60] usb 2-1: bad CDC descriptors [ 204.797898][ T26] logitech-hidpp-device: probe of 0003:046D:C086.0055 failed with error -22 [ 204.807433][ T6] usb 3-1: MIDIStreaming interface descriptor not found [ 204.971901][ T6] usb 5-1: USB disconnect, device number 29 [ 204.978496][ T358] usb 2-1: USB disconnect, device number 28 [ 205.009791][ T26] usb 3-1: USB disconnect, device number 30 [ 205.057422][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 205.097407][ T2572] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 205.106378][ T2572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.114354][ T2572] usb 1-1: Product: syz [ 205.118349][ T2572] usb 1-1: Manufacturer: syz [ 205.122739][ T2572] usb 1-1: SerialNumber: syz [ 205.127692][ T2572] usb 1-1: config 0 descriptor?? [ 205.177395][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.188560][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.198119][ T323] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 205.207031][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.215527][ T323] usb 4-1: config 0 descriptor?? executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 205.536117][ T6339] 9pnet: Insufficient options for proto=fd [ 205.553419][ T6343] 9pnet: Insufficient options for proto=fd executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "80477ea8"}]}}, 0x0}, 0x0) [ 205.597471][ T2572] usb 1-1: MIDIStreaming interface descriptor not found [ 205.606370][ T6345] 9pnet: Insufficient options for proto=fd [ 205.687933][ T323] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 205.694811][ T323] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 205.701728][ T323] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 205.708511][ T323] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 205.715252][ T323] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 205.722495][ T323] cp2112 0003:10C4:EA90.0056: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 205.767323][ T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 205.797343][ T326] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 205.800612][ T6] usb 1-1: USB disconnect, device number 32 [ 205.897330][ T358] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 205.917609][ T323] cp2112 0003:10C4:EA90.0056: Part Number: 0xA7 Device Version: 0x96 [ 206.037379][ T326] usb 5-1: Using ep0 maxpacket: 16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 206.257401][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.268594][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.278126][ T358] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 206.286918][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.295249][ T358] usb 3-1: config 0 descriptor?? executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 206.327426][ T26] usb 2-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 206.336630][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.344779][ T26] usb 2-1: Product: syz [ 206.349087][ T326] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 206.358098][ T26] usb 2-1: Manufacturer: syz [ 206.362513][ T26] usb 2-1: SerialNumber: syz [ 206.367379][ T323] cp2112 0003:10C4:EA90.0056: error setting SMBus config [ 206.374574][ T326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.382894][ T323] cp2112: probe of 0003:10C4:EA90.0056 failed with error -71 [ 206.391558][ T326] usb 5-1: Product: syz [ 206.395537][ T326] usb 5-1: Manufacturer: syz [ 206.400912][ T26] usb 2-1: config 0 descriptor?? [ 206.405828][ T323] usb 4-1: USB disconnect, device number 30 [ 206.413010][ T326] usb 5-1: SerialNumber: syz [ 206.417872][ T326] usb 5-1: config 0 descriptor?? [ 206.447768][ T26] usb 2-1: bad CDC descriptors [ 206.649785][ T323] usb 2-1: USB disconnect, device number 29 [ 206.677333][ T6] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 206.778093][ T358] logitech-hidpp-device 0003:046D:C086.0057: item fetching failed at offset 1/5 [ 206.787013][ T358] logitech-hidpp-device 0003:046D:C086.0057: hidpp_probe:parse failed [ 206.795113][ T358] logitech-hidpp-device: probe of 0003:046D:C086.0057 failed with error -22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 206.865750][ T6355] 9pnet: Insufficient options for proto=fd [ 206.900958][ T6361] 9pnet: Insufficient options for proto=fd [ 206.907425][ T326] usb 5-1: MIDIStreaming interface descriptor not found executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 206.917325][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 206.980240][ T358] usb 3-1: USB disconnect, device number 31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 207.110061][ T326] usb 5-1: USB disconnect, device number 30 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 207.197381][ T6] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 207.206399][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.214387][ T359] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 207.221919][ T6] usb 1-1: Product: syz [ 207.225884][ T6] usb 1-1: Manufacturer: syz [ 207.230373][ T6] usb 1-1: SerialNumber: syz [ 207.235233][ T6] usb 1-1: config 0 descriptor?? executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 207.467317][ T359] usb 4-1: Using ep0 maxpacket: 16 [ 207.487318][ T323] usb 2-1: new high-speed USB device number 30 using dummy_hcd executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 207.517708][ T6369] 9pnet: Insufficient options for proto=fd [ 207.556899][ T6375] 9pnet: Insufficient options for proto=fd executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "80477ea8"}]}}, 0x0}, 0x0) [ 207.628635][ T6379] 9pnet: Insufficient options for proto=fd [ 207.717422][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 207.747375][ T359] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 207.756289][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.764093][ T359] usb 4-1: Product: syz [ 207.767313][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 207.768034][ T359] usb 4-1: Manufacturer: syz [ 207.777418][ T359] usb 4-1: SerialNumber: syz [ 207.782267][ T359] usb 4-1: config 0 descriptor?? [ 207.877368][ T26] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 207.919595][ T6] usb 1-1: USB disconnect, device number 33 [ 207.927337][ T20] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 207.927450][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.945563][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.955054][ T323] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 207.963876][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.972237][ T323] usb 2-1: config 0 descriptor?? [ 208.257425][ T359] usb 4-1: MIDIStreaming interface descriptor not found [ 208.287370][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.298100][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.307708][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 208.316433][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.324842][ T20] usb 5-1: config 0 descriptor?? executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) [ 208.439395][ T323] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 208.439993][ T6383] 9pnet: Insufficient options for proto=fd [ 208.446377][ T323] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 208.467450][ T26] usb 3-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 208.476666][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.485138][ T323] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 208.491955][ T26] usb 3-1: Product: syz [ 208.495894][ T26] usb 3-1: Manufacturer: syz [ 208.500365][ T323] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 208.507104][ T323] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 208.513903][ T26] usb 3-1: SerialNumber: syz [ 208.518877][ T26] usb 3-1: config 0 descriptor?? [ 208.524250][ T2572] usb 4-1: USB disconnect, device number 31 [ 208.530214][ T323] cp2112 0003:10C4:EA90.0058: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 208.557627][ T26] usb 3-1: bad CDC descriptors [ 208.677487][ T323] cp2112 0003:10C4:EA90.0058: Part Number: 0xA7 Device Version: 0x96 [ 208.747322][ T6] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 208.759767][ T2572] usb 3-1: USB disconnect, device number 32 [ 208.808049][ T20] logitech-hidpp-device 0003:046D:C086.0059: item fetching failed at offset 1/5 [ 208.817058][ T20] logitech-hidpp-device 0003:046D:C086.0059: hidpp_probe:parse failed [ 208.825053][ T20] logitech-hidpp-device: probe of 0003:046D:C086.0059 failed with error -22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 208.997197][ T6389] 9pnet: Insufficient options for proto=fd [ 209.009984][ T20] usb 5-1: USB disconnect, device number 31 [ 209.097431][ T323] cp2112 0003:10C4:EA90.0058: error setting SMBus config [ 209.104695][ T323] cp2112: probe of 0003:10C4:EA90.0058 failed with error -71 [ 209.107393][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.113229][ T323] usb 2-1: USB disconnect, device number 30 [ 209.123233][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.138697][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.147651][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.155864][ T6] usb 1-1: config 0 descriptor?? executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) splice(r3, 0x0, r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x18c6) [ 209.297439][ T2572] usb 4-1: new high-speed USB device number 32 using dummy_hcd executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 209.547459][ T2572] usb 4-1: Using ep0 maxpacket: 16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) [ 209.600997][ T6398] 9pnet: Insufficient options for proto=fd [ 209.737373][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 209.743195][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 209.750193][ T6] usb 1-1: USB disconnect, device number 34 [ 209.787363][ T20] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 209.857368][ T2572] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 209.866359][ T2572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.874167][ T2572] usb 4-1: Product: syz [ 209.878191][ T2572] usb 4-1: Manufacturer: syz [ 209.882532][ T2572] usb 4-1: SerialNumber: syz [ 209.887310][ T326] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 209.894880][ T2572] usb 4-1: config 0 descriptor?? [ 210.027344][ T20] usb 5-1: Using ep0 maxpacket: 16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 210.127395][ T326] usb 2-1: Using ep0 maxpacket: 16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 210.162141][ T30] audit: type=1401 audit(1847638850.833:261): op=setxattr invalid_context="" [ 210.179788][ T6408] 9pnet: Insufficient options for proto=fd executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) [ 210.213163][ T6412] 9pnet: Insufficient options for proto=fd [ 210.307498][ T20] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 210.316517][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.324267][ T20] usb 5-1: Product: syz [ 210.328229][ T20] usb 5-1: Manufacturer: syz [ 210.332641][ T20] usb 5-1: SerialNumber: syz [ 210.337610][ T20] usb 5-1: config 0 descriptor?? [ 210.397462][ T2572] usb 4-1: MIDIStreaming interface descriptor not found [ 210.437399][ T326] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 210.446282][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.454079][ T326] usb 2-1: Product: syz [ 210.458057][ T326] usb 2-1: Manufacturer: syz [ 210.462459][ T326] usb 2-1: SerialNumber: syz [ 210.467797][ T326] usb 2-1: config 0 descriptor?? [ 210.487318][ T6] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 210.497329][ T358] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 210.599806][ T2572] usb 4-1: USB disconnect, device number 32 [ 210.727347][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 210.737319][ T358] usb 1-1: Using ep0 maxpacket: 16 [ 210.817451][ T20] usb 5-1: MIDIStreaming interface descriptor not found [ 210.847392][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.858207][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.867872][ T6] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 210.876676][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.885154][ T6] usb 3-1: config 0 descriptor?? [ 211.017394][ T358] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 211.026316][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.029237][ T323] usb 5-1: USB disconnect, device number 32 [ 211.034138][ T358] usb 1-1: Product: syz [ 211.043790][ T358] usb 1-1: Manufacturer: syz [ 211.048244][ T358] usb 1-1: SerialNumber: syz [ 211.053168][ T358] usb 1-1: config 0 descriptor?? executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) splice(r3, 0x0, r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x18c6) [ 211.107571][ T326] usb 2-1: MIDIStreaming interface descriptor not found [ 211.128960][ T326] usb 2-1: USB disconnect, device number 31 [ 211.367982][ T6] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 211.374748][ T6] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 211.382009][ T358] usb 1-1: MIDIStreaming interface descriptor not found [ 211.389027][ T6] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 211.396000][ T6] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 211.403724][ T358] usb 1-1: USB disconnect, device number 35 [ 211.409611][ T6] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 211.416906][ T6] cp2112 0003:10C4:EA90.005A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) [ 211.578525][ T6] cp2112 0003:10C4:EA90.005A: Part Number: 0x00 Device Version: 0x00 [ 211.587166][ T30] audit: type=1401 audit(1847638852.253:262): op=setxattr invalid_context="" [ 211.606238][ T6423] 9pnet: Insufficient options for proto=fd executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "bbcc2580"}, @global=@item_4={0x3, 0x1, 0x0, "76e70664"}]}}, 0x0}, 0x0) [ 211.797358][ T6] cp2112 0003:10C4:EA90.005A: error requesting SMBus config [ 211.811485][ T6] cp2112: probe of 0003:10C4:EA90.005A failed with error -71 [ 211.819439][ T6] usb 3-1: USB disconnect, device number 33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 211.907316][ T326] usb 2-1: new high-speed USB device number 32 using dummy_hcd executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r1, 0x541b, &(0x7f0000000100)) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 212.074576][ T30] audit: type=1400 audit(1847638852.743:263): avc: denied { create } for pid=6432 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.095362][ T30] audit: type=1400 audit(1847638852.743:264): avc: denied { write } for pid=6432 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.097339][ T2572] usb 1-1: new high-speed USB device number 36 using dummy_hcd executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) [ 212.128370][ T30] audit: type=1401 audit(1847638852.803:265): op=setxattr invalid_context="" executing program 2: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 212.267329][ T323] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 212.297376][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.308196][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.317887][ T326] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.326712][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.334971][ T326] usb 2-1: config 0 descriptor?? [ 212.367322][ T2572] usb 1-1: Using ep0 maxpacket: 16 [ 212.437323][ T6] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 212.487403][ T2572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.498168][ T2572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.507670][ T2572] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 212.516480][ T2572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.524318][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 212.529725][ T2572] usb 1-1: config 0 descriptor?? [ 212.557323][ T358] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 212.677323][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 212.847399][ T323] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 212.856439][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.864242][ T323] usb 4-1: Product: syz [ 212.868704][ T323] usb 4-1: Manufacturer: syz [ 212.873033][ T323] usb 4-1: SerialNumber: syz [ 212.877934][ T323] usb 4-1: config 0 descriptor?? [ 212.917424][ T358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.927484][ T358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.937371][ T326] usbhid 2-1:0.0: can't add hid device: -71 [ 212.943120][ T326] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.949809][ T326] usb 2-1: USB disconnect, device number 32 [ 212.967387][ T6] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 212.976322][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.984107][ T6] usb 5-1: Product: syz [ 212.988141][ T6] usb 5-1: Manufacturer: syz [ 212.992476][ T6] usb 5-1: SerialNumber: syz [ 212.997438][ T6] usb 5-1: config 0 descriptor?? [ 213.007371][ T358] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.008142][ T2572] ntrig 0003:1B96:0004.005B: unknown main item tag 0x0 [ 213.016479][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.023276][ T2572] ntrig 0003:1B96:0004.005B: item fetching failed at offset 5/7 [ 213.030972][ T358] usb 3-1: SerialNumber: syz [ 213.038557][ T2572] ntrig 0003:1B96:0004.005B: parse failed [ 213.048373][ T2572] ntrig: probe of 0003:1B96:0004.005B failed with error -22 [ 213.221985][ T2572] usb 1-1: USB disconnect, device number 36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 213.337387][ T323] usb 4-1: MIDIStreaming interface descriptor not found executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 213.417411][ T6] usb 5-1: MIDIStreaming interface descriptor not found [ 213.425413][ T358] usb 3-1: 0:2 : does not exist [ 213.430660][ T6] usb 5-1: USB disconnect, device number 33 [ 213.468822][ T358] usb 3-1: USB disconnect, device number 34 [ 213.539825][ T324] usb 4-1: USB disconnect, device number 33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r1, 0x541b, &(0x7f0000000100)) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') [ 213.744476][ T30] audit: type=1401 audit(1847638854.413:266): op=setxattr invalid_context="" executing program 2: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 213.799594][ T6453] 9pnet: Insufficient options for proto=fd [ 213.830212][ T6459] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 213.967046][ T30] audit: type=1401 audit(1847638854.633:267): op=setxattr invalid_context="" executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 3: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 214.047325][ T324] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 214.078416][ T6474] 9pnet: Insufficient options for proto=fd [ 214.127331][ T323] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 214.127395][ T358] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 214.267325][ T6] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 214.377330][ T2572] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 214.377337][ T358] usb 1-1: Using ep0 maxpacket: 16 [ 214.407477][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.418199][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.427838][ T324] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.436572][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.444981][ T324] usb 5-1: config 0 descriptor?? [ 214.497452][ T323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.507395][ T323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.507417][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 214.587395][ T323] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.596399][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.604223][ T323] usb 3-1: SerialNumber: syz [ 214.667383][ T358] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 214.676254][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.684148][ T358] usb 1-1: Product: syz [ 214.688130][ T358] usb 1-1: Manufacturer: syz [ 214.692456][ T358] usb 1-1: SerialNumber: syz [ 214.697490][ T358] usb 1-1: config 0 descriptor?? [ 214.787353][ T2572] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.797423][ T2572] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.797452][ T6] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 214.814878][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.822679][ T6] usb 2-1: Product: syz [ 214.826650][ T6] usb 2-1: Manufacturer: syz [ 214.831287][ T6] usb 2-1: SerialNumber: syz [ 214.836154][ T6] usb 2-1: config 0 descriptor?? [ 214.887821][ T2572] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.896727][ T2572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.904546][ T2572] usb 4-1: SerialNumber: syz [ 215.027431][ T324] usbhid 5-1:0.0: can't add hid device: -71 [ 215.033346][ T324] usbhid: probe of 5-1:0.0 failed with error -71 [ 215.040076][ T324] usb 5-1: USB disconnect, device number 34 [ 215.177394][ T358] usb 1-1: MIDIStreaming interface descriptor not found executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 215.383242][ T358] usb 1-1: USB disconnect, device number 37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 215.457398][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 215.465094][ T323] usb 3-1: 0:2 : does not exist [ 215.465887][ T6] usb 2-1: USB disconnect, device number 33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 215.502277][ T30] audit: type=1401 audit(1847638856.173:268): op=setxattr invalid_context="" [ 215.528333][ T2572] usb 4-1: 0:2 : does not exist [ 215.533124][ T323] usb 3-1: USB disconnect, device number 35 [ 215.568386][ T2572] usb 4-1: USB disconnect, device number 34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 215.817326][ T326] usb 5-1: new high-speed USB device number 35 using dummy_hcd executing program 0: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 215.938185][ T30] audit: type=1401 audit(1847638856.613:269): op=setxattr invalid_context="" [ 215.940239][ T6492] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 215.986295][ T6499] 9pnet: Could not find request transport: fd0x0000000000000003 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 216.039901][ T6503] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.057353][ T2572] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 216.064764][ T326] usb 5-1: Using ep0 maxpacket: 16 [ 216.167338][ T6] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 216.287344][ T358] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 216.387316][ T60] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 216.417413][ T326] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 216.426289][ T326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.434194][ T326] usb 5-1: Product: syz [ 216.438277][ T326] usb 5-1: Manufacturer: syz [ 216.442680][ T326] usb 5-1: SerialNumber: syz [ 216.447737][ T326] usb 5-1: config 0 descriptor?? [ 216.457396][ T2572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.468121][ T2572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.477631][ T2572] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.486462][ T2572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.495326][ T2572] usb 4-1: config 0 descriptor?? [ 216.527370][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.537351][ T358] usb 2-1: Using ep0 maxpacket: 16 [ 216.542240][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.627327][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 216.627364][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.641229][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.649020][ T6] usb 1-1: SerialNumber: syz [ 216.817378][ T358] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 216.826296][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.834115][ T358] usb 2-1: Product: syz [ 216.838060][ T358] usb 2-1: Manufacturer: syz [ 216.842467][ T358] usb 2-1: SerialNumber: syz [ 216.847442][ T358] usb 2-1: config 0 descriptor?? [ 216.917421][ T326] usb 5-1: MIDIStreaming interface descriptor not found [ 216.957433][ T60] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 216.966337][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.974183][ T60] usb 3-1: Product: syz [ 216.979001][ T60] usb 3-1: Manufacturer: syz [ 216.983395][ T60] usb 3-1: SerialNumber: syz [ 216.988462][ T60] usb 3-1: config 0 descriptor?? [ 217.119903][ T326] usb 5-1: USB disconnect, device number 35 [ 217.317447][ T358] usb 2-1: MIDIStreaming interface descriptor not found [ 217.325008][ T6] usb 1-1: 0:2 : does not exist executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 217.368775][ T6] usb 1-1: USB disconnect, device number 38 [ 217.405369][ T30] audit: type=1401 audit(1847638858.073:270): op=setxattr invalid_context="" executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 217.438864][ T6512] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.460349][ T6515] 9pnet: Could not find request transport: fd0x0000000000000003 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "fd6e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x2, "54ee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 217.520340][ T1439] usb 2-1: USB disconnect, device number 34 executing program 4: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 217.657393][ T60] usb 3-1: MIDIStreaming interface descriptor not found [ 217.666454][ T60] usb 3-1: USB disconnect, device number 36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 218.017317][ T6] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 218.027308][ T326] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 218.046244][ T30] audit: type=1401 audit(1847638858.713:271): op=setxattr invalid_context="" executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 218.086841][ T6531] 9pnet: Could not find request transport: fd0x0000000000000003 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 218.208922][ T6539] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.237860][ T6542] 9pnet: Insufficient options for proto=fd executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 218.288401][ T6546] 9pnet: Insufficient options for proto=fd [ 218.377398][ T6] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 218.386326][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.394639][ T6] usb 1-1: config 0 descriptor?? [ 218.427323][ T324] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 218.437364][ T326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.447374][ T326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.527472][ T326] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.536347][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.544150][ T326] usb 5-1: SerialNumber: syz [ 218.597314][ T1439] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 218.667314][ T324] usb 2-1: Using ep0 maxpacket: 16 [ 218.787381][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.798102][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.807819][ T324] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 218.816625][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.824957][ T324] usb 2-1: config 0 descriptor?? executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 218.837798][ T326] usb 5-1: 0:2 : does not exist [ 218.847314][ T1439] usb 3-1: Using ep0 maxpacket: 16 [ 218.886237][ T326] usb 5-1: USB disconnect, device number 36 [ 218.897373][ T2572] uclogic 0003:256C:006D.005C: failed retrieving string descriptor #100: -71 [ 218.905987][ T2572] uclogic 0003:256C:006D.005C: failed retrieving pen parameters: -71 [ 218.914038][ T2572] uclogic 0003:256C:006D.005C: failed probing pen v1 parameters: -71 [ 218.922195][ T2572] uclogic 0003:256C:006D.005C: failed probing parameters: -71 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 218.929680][ T2572] uclogic: probe of 0003:256C:006D.005C failed with error -71 [ 218.937879][ T2572] usb 4-1: USB disconnect, device number 35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0x10}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) [ 219.061969][ T6561] 9pnet: Insufficient options for proto=fd [ 219.167397][ T1439] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 219.176309][ T1439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.184099][ T1439] usb 3-1: Product: syz [ 219.188138][ T1439] usb 3-1: Manufacturer: syz [ 219.192488][ T1439] usb 3-1: SerialNumber: syz [ 219.197466][ T1439] usb 3-1: config 0 descriptor?? executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 219.308175][ T324] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 219.314999][ T324] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 219.321999][ T324] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 219.328804][ T324] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 219.335537][ T324] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 219.342960][ T324] cp2112 0003:10C4:EA90.005D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0x10}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 219.468953][ T6576] 9pnet: Insufficient options for proto=fd [ 219.497353][ T2572] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 219.517504][ T324] cp2112 0003:10C4:EA90.005D: Part Number: 0xA7 Device Version: 0x96 [ 219.737419][ T1439] usb 3-1: MIDIStreaming interface descriptor not found [ 219.745360][ T1439] usb 3-1: USB disconnect, device number 37 [ 219.777335][ T358] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 219.867347][ T2572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.878154][ T2572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.888124][ T2572] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.896980][ T2572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.905176][ T2572] usb 4-1: config 0 descriptor?? [ 219.957407][ T324] cp2112 0003:10C4:EA90.005D: error setting SMBus config [ 219.964735][ T324] cp2112: probe of 0003:10C4:EA90.005D failed with error -71 [ 219.972614][ T324] usb 2-1: USB disconnect, device number 35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 220.137363][ T358] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.147319][ T358] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 220.227430][ T358] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.236446][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.248142][ T358] usb 5-1: SerialNumber: syz executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0x10}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 220.298245][ T6584] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.527869][ T358] usb 5-1: 0:2 : does not exist [ 220.533447][ T358] usb 5-1: USB disconnect, device number 37 [ 220.857383][ T6] usb 1-1: Cannot set autoneg [ 220.861961][ T6] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 220.870424][ T6] usb 1-1: USB disconnect, device number 39 [ 221.027408][ T2572] uclogic 0003:256C:006D.005E: failed retrieving string descriptor #200: -71 [ 221.036009][ T2572] uclogic 0003:256C:006D.005E: failed retrieving pen parameters: -71 [ 221.044039][ T2572] uclogic 0003:256C:006D.005E: failed probing pen v2 parameters: -71 [ 221.051951][ T2572] uclogic 0003:256C:006D.005E: failed probing parameters: -71 [ 221.059261][ T2572] uclogic: probe of 0003:256C:006D.005E failed with error -71 [ 221.067240][ T2572] usb 4-1: USB disconnect, device number 36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x541b, 0x0) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 221.360867][ T6594] 9pnet: Insufficient options for proto=fd [ 221.391347][ T6599] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 221.421841][ T30] audit: type=1401 audit(1847638862.093:272): op=setxattr invalid_context="" [ 221.443756][ T6606] syz-executor.2[6606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 221.443828][ T6606] syz-executor.2[6606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.477823][ T30] audit: type=1400 audit(1847638862.153:273): avc: denied { read } for pid=6601 comm="syz-executor.0" path="socket:[39229]" dev="sockfs" ino=39229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) [ 221.532775][ T6617] 9pnet: Insufficient options for proto=fd [ 221.562546][ T6618] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 221.585739][ T30] audit: type=1401 audit(1847638862.253:274): op=setxattr invalid_context="" [ 221.604434][ T6626] syz-executor.3[6626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x541b, 0x0) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) [ 221.604508][ T6626] syz-executor.3[6626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.651619][ T30] audit: type=1401 audit(1847638862.323:275): op=setxattr invalid_context="" executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x38}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 221.749121][ T6651] 9pnet: Could not find request transport: fd0x0000000000000005 [ 221.766326][ T6653] syz-executor.2[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.766414][ T6653] syz-executor.2[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 221.787011][ T30] audit: type=1401 audit(1847638862.453:276): op=setxattr invalid_context="" executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 221.847310][ T1439] usb 2-1: new high-speed USB device number 36 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 2: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 221.888840][ T6666] 9pnet: Could not find request transport: fd0x0000000000000005 [ 221.897501][ T358] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 221.921457][ T30] audit: type=1401 audit(1847638862.593:277): op=setxattr invalid_context="" executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 222.087355][ T1439] usb 2-1: Using ep0 maxpacket: 16 [ 222.094580][ T6687] 9pnet: Could not find request transport: fd0x0000000000000005 [ 222.111867][ T30] audit: type=1401 audit(1847638862.783:278): op=setxattr invalid_context="" [ 222.187337][ T2572] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 222.227343][ T6] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 222.287375][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.298118][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.307653][ T358] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 222.316455][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.324855][ T358] usb 1-1: config 0 descriptor?? [ 222.367373][ T1439] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 222.376277][ T1439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.384201][ T1439] usb 2-1: Product: syz [ 222.388121][ T1439] usb 2-1: Manufacturer: syz [ 222.392540][ T1439] usb 2-1: SerialNumber: syz [ 222.397494][ T1439] usb 2-1: config 0 descriptor?? [ 222.487429][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 222.547367][ T2572] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.557405][ T2572] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.637483][ T2572] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.646456][ T2572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.654760][ T2572] usb 3-1: SerialNumber: syz [ 222.807398][ T6] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 222.816261][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.824349][ T6] usb 4-1: Product: syz [ 222.828432][ T6] usb 4-1: Manufacturer: syz [ 222.832828][ T6] usb 4-1: SerialNumber: syz [ 222.837808][ T6] usb 4-1: config 0 descriptor?? [ 222.897439][ T1439] usb 2-1: MIDIStreaming interface descriptor not found [ 222.905921][ T1439] usb 2-1: USB disconnect, device number 36 executing program 1: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 223.327438][ T6] usb 4-1: MIDIStreaming interface descriptor not found [ 223.335901][ T2572] usb 3-1: 0:2 : does not exist [ 223.341762][ T2572] usb 3-1: USB disconnect, device number 38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 223.425669][ T6702] 9pnet: Insufficient options for proto=fd [ 223.467372][ T358] uclogic 0003:256C:006D.005F: failed retrieving string descriptor #100: -71 [ 223.476086][ T358] uclogic 0003:256C:006D.005F: failed retrieving pen parameters: -71 [ 223.484063][ T358] uclogic 0003:256C:006D.005F: failed probing pen v1 parameters: -71 [ 223.492085][ T358] uclogic 0003:256C:006D.005F: failed probing parameters: -71 [ 223.500521][ T358] uclogic: probe of 0003:256C:006D.005F failed with error -71 [ 223.508576][ T358] usb 1-1: USB disconnect, device number 40 [ 223.529872][ T324] usb 4-1: USB disconnect, device number 37 [ 223.747304][ T1439] usb 2-1: new high-speed USB device number 37 using dummy_hcd executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 223.972328][ T30] audit: type=1401 audit(1847638864.643:279): op=setxattr invalid_context="" executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 3: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) [ 224.049944][ T6714] 9pnet: Insufficient options for proto=fd [ 224.065497][ T6719] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 224.137377][ T1439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.147411][ T1439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.237589][ T1439] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.246585][ T1439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.254386][ T1439] usb 2-1: SerialNumber: syz [ 224.257312][ T324] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 224.307331][ T2572] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 224.357308][ T60] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 224.497354][ T324] usb 3-1: Using ep0 maxpacket: 16 [ 224.557836][ T1439] usb 2-1: 0:2 : does not exist [ 224.563635][ T1439] usb 2-1: USB disconnect, device number 37 [ 224.707433][ T2572] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.717467][ T2572] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.757381][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.768318][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.777410][ T324] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 224.777990][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 224.786801][ T324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.795726][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.803573][ T324] usb 3-1: Product: syz [ 224.811915][ T60] usb 1-1: config 0 descriptor?? [ 224.816609][ T324] usb 3-1: Manufacturer: syz [ 224.820181][ T2572] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.824526][ T324] usb 3-1: SerialNumber: syz [ 224.833478][ T2572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.841491][ T324] usb 3-1: config 0 descriptor?? [ 224.845544][ T2572] usb 5-1: SerialNumber: syz executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 224.907558][ T30] audit: type=1401 audit(1847638865.583:280): op=setxattr invalid_context="" executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x6acd) ppoll(&(0x7f0000000000)=[{r0, 0x1444}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 225.030333][ T6731] 9pnet: Insufficient options for proto=fd [ 225.227352][ T6] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 225.347392][ T324] usb 3-1: MIDIStreaming interface descriptor not found [ 225.355174][ T2572] usb 5-1: 0:2 : does not exist [ 225.356024][ T324] usb 3-1: USB disconnect, device number 39 [ 225.361464][ T2572] usb 5-1: USB disconnect, device number 38 [ 225.467328][ T6] usb 4-1: Using ep0 maxpacket: 16 executing program 4: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 225.747380][ T6] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 225.756381][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.764188][ T6] usb 4-1: Product: syz [ 225.768257][ T6] usb 4-1: Manufacturer: syz [ 225.772630][ T6] usb 4-1: SerialNumber: syz [ 225.777657][ T6] usb 4-1: config 0 descriptor?? executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 225.825491][ T30] audit: type=1401 audit(1847638866.493:281): op=setxattr invalid_context="" executing program 1: capset(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) [ 225.908744][ T6747] 9pnet: Insufficient options for proto=fd [ 225.957413][ T60] uclogic 0003:256C:006D.0060: failed retrieving string descriptor #200: -71 [ 225.966016][ T60] uclogic 0003:256C:006D.0060: failed retrieving pen parameters: -71 [ 225.974078][ T60] uclogic 0003:256C:006D.0060: failed probing pen v2 parameters: -71 [ 225.982008][ T60] uclogic 0003:256C:006D.0060: failed probing parameters: -71 [ 225.989215][ T60] uclogic: probe of 0003:256C:006D.0060 failed with error -71 [ 225.997463][ T60] usb 1-1: USB disconnect, device number 41 [ 226.147317][ T1439] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 226.187316][ T324] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 226.257401][ T6] usb 4-1: MIDIStreaming interface descriptor not found executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "fd6e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x2, "54ee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 226.466948][ T2572] usb 4-1: USB disconnect, device number 38 [ 226.547380][ T1439] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.547380][ T324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.547405][ T1439] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.557611][ T324] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.657419][ T324] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.657505][ T1439] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.666325][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.676794][ T1439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.683007][ T324] usb 2-1: SerialNumber: syz [ 226.690795][ T1439] usb 3-1: SerialNumber: syz [ 226.727386][ T60] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 226.747375][ T326] usb 5-1: new high-speed USB device number 39 using dummy_hcd executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x84900, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 226.967421][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 226.967991][ T324] usb 2-1: 0:2 : does not exist [ 226.978685][ T324] usb 2-1: USB disconnect, device number 38 [ 226.988125][ T1439] usb 3-1: 0:2 : does not exist [ 226.995284][ T1439] usb 3-1: USB disconnect, device number 40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) [ 227.058574][ T30] audit: type=1401 audit(1847638867.733:282): op=setxattr invalid_context="" [ 227.137452][ T326] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 227.146291][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.154689][ T326] usb 5-1: config 0 descriptor?? [ 227.287414][ T60] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 227.296275][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.304336][ T60] usb 1-1: Product: syz [ 227.308507][ T60] usb 1-1: Manufacturer: syz [ 227.312916][ T60] usb 1-1: SerialNumber: syz [ 227.318484][ T60] usb 1-1: config 0 descriptor?? [ 227.337321][ T358] usb 4-1: new high-speed USB device number 39 using dummy_hcd executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(0x0, 0x0) executing program 1: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 227.499971][ T6771] 9pnet: Insufficient options for proto=fd [ 227.697381][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.708124][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.717678][ T358] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.726448][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.734755][ T358] usb 4-1: config 0 descriptor?? [ 227.777318][ T1439] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 227.827418][ T60] usb 1-1: MIDIStreaming interface descriptor not found [ 227.835668][ T60] usb 1-1: USB disconnect, device number 42 [ 228.037321][ T1439] usb 3-1: Using ep0 maxpacket: 16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x84900, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20}, 0x20) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(0x0, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 228.294234][ T30] audit: type=1401 audit(1847638868.963:283): op=setxattr invalid_context="" [ 228.330410][ T6782] syz-executor.0[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 1: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) [ 228.330694][ T6782] syz-executor.0[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.377361][ T1439] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 228.381716][ T30] audit: type=1401 audit(1847638869.053:284): op=setxattr invalid_context="" [ 228.389700][ T1439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.416232][ T1439] usb 3-1: Product: syz [ 228.420745][ T1439] usb 3-1: Manufacturer: syz [ 228.425246][ T1439] usb 3-1: SerialNumber: syz [ 228.430239][ T1439] usb 3-1: config 0 descriptor?? [ 228.637329][ T6] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 228.877422][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 228.907421][ T1439] usb 3-1: MIDIStreaming interface descriptor not found [ 229.112844][ T1439] usb 3-1: USB disconnect, device number 41 [ 229.157395][ T6] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 229.166946][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.174801][ T6] usb 1-1: Product: syz [ 229.178828][ T6] usb 1-1: Manufacturer: syz [ 229.183208][ T6] usb 1-1: SerialNumber: syz [ 229.188129][ T6] usb 1-1: config 0 descriptor?? executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x84900, 0x0) executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90, 0x0, 0x7f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="65ad9333880189749b1db2804305a942030c54078d802fd1de553469bbf85c16d680e7bb018d3bfcf7fd1f5e664b5e896368ee96bb63eee9f47abe81bfeffa22f816f7f655de5b17de823e44e873677ea9c55a124c1435f4b40589006f28d2d8fccfeb162bfd26ef108218891da937ee3e121cc39a57927485de1343cf5d73a108d6e4cb96de7f08442dd79efb856e2b0051068cd09d010c46bef7e2d895c1058463c14edf77b2701636f0b9d824f118bb9637c6eb808a7b81cfbd98578b452dffd664e9c9aa474e0196cec2aa5c338206786d739a0abbf326baf2184ed135c3e032a1326ff4742aa80297f694b30f92af36c59e6ca8781f7c9b3d5130c96d1834d51af27bacaf3385a36b7f3b7ece7c15f12c0795dafea5186818831f8061914644a8e52976e7672e131f5b96a63e93c42ec41281675617467dd1e21418a0801e3f27f4206185d92bada9d949297411260d2222867303c13bf2eeb043166282eed3f671d89b37ccb1a3250830d6ec5765ef37120630b7bab7fed89eb2f4a32c8a6f403cb7a6f1ac6890e9e2c28c440c699f12fe5bf1cd565d3dcfed3fe37556a4d184fc8d94637d303291e9bd5912a4a75c78407426eb7a404e7c4bdf065db8ed27b09a8e4e9c02d2aef3d9db559d8e0b3737d8c09bae1d346283fc384235e1a45c76f31aba2ec977389004c6b6d7487a0d283f5be9f042b8983e4556be902f9b6fa74ce5801826add186c58530764a8e3e6e4aff09f39fe323eed4eaa750e93137062a07fd0aba55bc4c82d8f763905f85c9165c8c0b428e0a9769621b5fe8096ead7ac16f8aa7be179c6b67c3311b26052cafe58b3155cba3c7ae6b99cdd9bfba40aa2b10e79fdeed7231b5ed59658e43da84f1086c1621e50ce1008dedc3d74cab389f422dafb7d75c3eea107d07947805fb9fa58fe6272611a8d2bcae3c22609567dcb709abd99c82b861a7621f1bfee3d011c3881882ba3301118f320f739373a33d9a16fcfd58d89af416f49ccb09eb4af220c222e0e6f2c3374ef7a564ef02ceb63fa3f24a0c017f81a76e3533aae847911bc774886f1b689988bb5cac3c5b07b60d590679a851176a47d64bc5d33592cd6ffb99f56a6add51ca5d7621f32737f44757f436b2e599301e2a57619faba134c2f0307547d49b540ebb43c301b8380ad1b6b34425002b1c72ae0e1ece0c19223a8f0742fb69cc34d5dc66f041f7a75c95bfb7f83723032d3a16e2cbebc1d58429b50008f77192b2177e9fa9372904fad86f9a294040a3873f20b1f19c5f2c9ff65a732d88ba70578b919b46bc6d265d257fba94d0005bd246ced54944831cdadf78459dc84cc5cec32950f31270bc6b48903abba8c264d7fee798ffaba57ad4f555cdfad5f78a8e98437f0b0c45a2f1e3cd2ab2cac9b4507b5b604577ed4dbf849501301af94162f7fe1206b7a776dbf498f8a71958d8c2ac2c63b8247cd02da2889955f6f4311ec700c472766ec3e06a72ce48e9444633ee5969ad58cbe7d3a3648c57baae1edc6500ceb3d793c55b638c6769054b9b512b563551eb411322fa146e4b836b56e9ada14a7dc51bf19a3a613cd8c9c1effdab206aa45e8bf7b14f35a3dae70b0daa7d23471ad115c8d28ee40bbc5479498a15a7de24734d8590051afea4c1aaa3bee627291f9f16219b2a9d188bc9f4213488a6b7a1736c52b28f7a4b5e5b7f6cf4a01f8e8f89eeae2cc27e563210fa02b32728b894cd9661c4d85fb21fc889c3f2c5c1bee4aae345bc01a40da55714e19b0c9fd7f71107e54880c9f451c4739b71feb77dc1dadec915c92f6e9db2d25ae8c5161a11ea88b83a640d1bb2da1a6967f4bca0f62cc7ba6a449f85f22d90e9471364cbcd5dc160e4a38c52b53aac7b952a93be58b02682267796af98583a2fc64a9b33799b1e24e023d814d6846ee5230d870271adf3f8207b018e179d9ad59ec0f8671db258e86095d457a743a612ba5b21415ecc96803f09446b56c0803c2cd4d485e6c5724a8bc2bf5a5291f0cd5745596be0ddac585747b85f24a5ecc6156df545f82bb8385c2a31e014f59629f610ee96f9991bc9e771467382815eaca60a83ea7a505f72d8e2c2874da4a2ac1931c6d2efbdd1913a347289f3606b11021276b35b44d6823c1674d1965fc76b6d2ca7e6946437650bc73b5dc5511f46e140d301c144f7b9a98e0ecd37ea78a01d1116092c82a7f401ca9ec9c3753ff1684e8cbb4b9ca69bafbf119a5ae9b71f818a9270d71300b243b1ce3e1c7eeffcf6f08ad935460ee606bc78c6c9919a9d26c45da2ea2012fa19791b7f2d2f5d309250714027ee7d209ba81456840bceb89d9e846bdd8b763952d3641d40eb89da0013c4ce992ab46924a4959c2604df5ca12ca3885d7a8acead172a285f9e2c42f9ae7aaa5622f0ce526bb604e28ffcd673b7b7720b131d5273bd670aaad5e493d4167b93f58491cc181c15215a8e8f092aca519dbc90193100bded7fdbc7ee2cc1c110eb453d4362965532174a9d032af7293c9652716672acd92f009b8a80fbf313e4495a01b7eaf485129ab944bd13e601ce638aaff2237c0e9241dd31ec2bc846caaad7c3e36ccc607cbe914d3831b6290d71652fe2629d54ccb7f16fcb522b21628981dff848330da51f03901a61fbae6d4cb3141024b0362b16799bec82623ddf6f8d72d94c5e2694ce5a4798c4254ef1686ceea8e7643a2e078315f416cb026952c89feb5adddf251958ed671e0494d11d7ec0acdbe0ba532df46034a5a73d5f1d247c9e6bf2862b01accd84504f81b1ec57491a114954facda27d659a966c1fd42564fb7ee847140e4d50e89eeff657d95f8b04d0d65d886be1dacabbdeff4f38632fdaa4f4bf174010cc9546711a2cf1c8f2969ba94fb456bd36631997ec6f35c20baac29cdeba43f531b3770be2aadde375ca9e5b3bf8951b18f0631d69ec48b3e922cb053faf32e580dd065d8f19b968a9541ea03fe96f1ffc5e3a442ddd69b63cb11f7911256316b8da387ed308f7eeb94404106e6a6b7022d6fca1cfaf2e90abceb9b2be046201f13c0a9378470bf13466db16fcef584399380113b20a3c05128a57a776d489f13a3476a15d724165c9512f0bab1d429848e95d0e8f6d07638da6b39859811cbf8ffd5b6a04e04a3e3676b7e40d05583009fe16a0c1c1d8dad56ab5ba5eaa7ed9703503381bd7fd609c9e4e514c6554f9d62be8b2b4c5f10314f528756bf9ae6fc0376ce78287adb2eefe88bc1ee876de3d0e8ef4ecc58313b9c0e9065f5396e6b90cd7d14e5f7b48df5e1d7f04e86419dac5888d8775a0617442e2bb705c5323ab211b2e6f07a9d9cc1b2388f2be8bfad4ac9fc76d7a5ff7ac0beb73d256340c2227556381c42fda1cae5ef9a812c0ed97b3ce4c631d63f8a5a3398a230824af2d35bdfe70323ade83ce4ae29700e194ed1c05515d221fcfd5a0333b93bb80a57bcbef2a21246f6ce87527ab742ec5f8bc8d609804e7f4205e12843cb1ca21d2b3a9e50b7bdb211b73b256eac36ffab8ac115f9949746ebd1782d4de79dc609fc9ce236492292ec783bccff0e8652e93ce870105a26da09c4cf67b2d7666bd4161f52f7d84d144b1b0ef03000000ee0ea466dfa9479fab295159f00ee7209544628d5e0fa5d91dcd2dca093d012df5144b54a343f12385df445d4665941236b50179b47ee561d52b6645184044db3e2eed66001a7da86bd9b3710fe39f32cf578f1a1ebaf45f43518d47b43a2829146a703cbe42d2b6863a84df4b3cb3ec07f2a10ebfb0f64000d9c244ff7482b8243ca0915326ebb9e623004ed48991cae68371f47a946a178bc823f340722503da7d03b50f1d078adaab1d07ef39d1d7457ed2f50c34a1fbd5ae656222f2a71c3a43a9af4bb5bbaa6bcce92d6515ee2671ecf5b6a5d7e15565a224f299d1cdd11ffad8cae2d56fcf2e4151db6446c4715769c844285f77e3d269ed7c02264bb9ff052bbe03beea8b35d15864872f64cf587d0c00d0e38a92dde19f093efe1440509f42792e1fd17eb3f237e38468e77f0666494e8cbe1bee84217e93af93cae90c0de0ea2b6843d665e9208fbb843af24bff66594e82a12b5b59d83c2d2ecb16110c651d0e0b7f7872fc11764e138ebf0fcd77470e0da24eff6698a25f4f251805e2b72a9c472596a2751ba50070d1d6dbcf5ebbbfc32e9492b33f24d7c6481dc4ba0e11bce80fc90f37d30e6713c95a0ffda4591990e23765f75a7c00974c92c5dc31a0426f5104f47b519eec45fbcbcc687966adbbe7f589ee9b340ffc16d0ba5e09fb0703fa00243a43572e2c8d4e769ac5c8f503f9de3b17b67986d8748a6914f629dd2d466c03317b72b8b3f06c8cb2af11ca7f990ba7a883ae4f4b9f5f9e048e6b991a57f84ff56474e7b7da75df1a6d66dec049ff4537ae07d36cce1613d4ed4b532f2bbb8bd018f9c126fa882a6d021067b03a878815d9f673831d2801f065450396224c54acb3c84b154e605a749ac42db4e49c45a0c61bb44f4083d35a221a8bff30282d44c4df07f3615ccd075b6ca881a8fbc209bb34e6444c0f04c9365ed53d6b996e46244e0777f9177453d42dcbb047521b9d7e87498f3cddc4803a639bec476871e9d7a5b9b483548567ebf15038b052ddb6bf51136ffe1f076cf9cc8d9875ce198a3d6fbda1c7fc322c53838f721a85c8482e84c9543067cc7950d5e5fd8ed48a581ea5b358b0b9083c09025d7e281c1a68949e6460d02bb03662fac6852905d891d6e8c43e71104b94ba33437b6fbd9b73e7fd46b589fa70b8e5503b4d8f78409712134d98de257fdc1916aacb12fe25794c1a200cdff98d562c05ce513b6f59e07a6125d76975a60ef136288d28002ef4b6f2c760559fff9dedc8e3fe33988e7d834a849cce47ea1ca9afd8a6eeb54aabd77373d1dc6e69aef186d5ec580de5e39876b82037970e6a2285e17768c6f34682527dd38d0a24da71e3384a29b94f2d14cc9bd74e4bab3cc848703e3a47cf0a8b36f4decc89363c91883876cf52c7f95cbfc1e546d9ef6528b98fbb2d078158ae153506be8bb7413d0f6b9f3c2abd9b57959892ae3f6571d26966c835f3cce4d51e3dffea75963adc4b72ae821c976c0781e4602b9c93299c0fb6ae7bb3f473c5e5e5da0f2c6e548fc2373d7b94f8decb162ad303ff943580da54352bca8ff71098ecc22247397505f743f1371630a1eb05ce11796cac3d68f785685de318dd8fcaadc437087935798b50808677f592699daaa1d535b96d03cb892cfd78cf3d8457b752b2e21cd868fcde04627a8562a598996d5a07db6bbe58360f74e023bfda0bfad549398874af251b04c4bd73a60fce67cc33e87ebf9e9e981ce76e5a1548c81bdc5b21a6cd575348a166678b94e9932a563b9a9091a93a0ae171925b822d42030df44aa326c4fdf7fb559b4ea6a7b68c2f1e32df8b6e08c0b2f257c83b23a024d47073bf9fd46e56ad30a7dda38a8ed2c1536fdc822b2d8422005fd357bd1bf0e27f33098df529a82b7c943d32e28386acd74258c1d81f3552c343dc2663956b5a3bcf79e50b66d8e20ab623ad9dc4f19c7b2a84437862756c0e517fc44050659e3c29a20e372e7caf6e3675eec653081fd4839c3469bd06c03e21ebdd90af52339b45ed9ebd3f1819a53e0fe150d2ef957831bf35ee13c8f00288f3d27dc5a57967e85e08718daa727ecdc19e2000e3634bef4779aad8b34404f2b12998d62ebc6b33866c88819ccbb475ecde60cd64ea23453e4f7c30fa3656b01363075d6507c5a44981187e2663ee5676f4f9e6623ba503b5c5aba6755fc248e2d1f824891a3a430d506fa753e96c4185dc08bf7773201bb087e745ad90f500b169da7f6d9f4a8aac6e0a64a45474c8592f177e0036bc6f99314685e5d633feeceb47188a45388e8395d143be717c80df34bcfb281a9aa0404c4f712e0dd6d69bf8ccdac4dc121264608fea11f789a6bd864524b0913ad0523f1eeeddf76262a93bd3ab2e184b43d82cf7a0fa81543600b7f3ba835632307b6e79127544e43436207a3d9411ddb2a6c42c320500073329ded84bd61ee51325c6fff6f5085696ab5068cec51b6cc524c104fb593abbf9851ac7437804f225a18a3711ae9a4383b37135172016cd401ea64c5a345db0dc13b8fca1cabf0ea10f07da4e8e9b4312165000f3bcab742e7765ebc7aa391d35eff19f5ff0bd02b802abef08c33a58c656cda5249bd294c7e807db30e713f880949bfc04d6a839db1b56a8144616e7d04b86711b8cf5815f955e2f3d813a7282a494a1d448a878171af29e91f5b0c944bc02d4e1d0988e5a4015baa51f5fb4b47a25879f9c174cef94908e140d12575dfe7ba2360730c5445d4869c7195a8c9f958cbf5a58065aa305b04b2df2bec4315d634c5f15be25ac1686d451f480fa07e2d3e46bd9103c61f61f27a29f135186f7692f3ee9134888225df57ca5643ecb8571a471ed999e09f98e7e0bbb975ba7d615ca19761349dfc35fc9502b53d95365044425ac98478c760dba154b37e5a4af907ea21a32a76da9809485c10d6905b03650e457089abba7213d9f0bae2bce5f88c8ce1c5cf189258a2d8cd378b044a5b79b090fbf18d3176437d6673ec40be49cf8610b9b4c825c33d5cf77356d5dc5446dd45631f837254104a49d438354539db92bee82eb85688a99f27a62f24e21c5c14c54f1b33ee2285a68351460661d54a4f43ee6a1f95d9ff5326882dbb08c15f9a36dc49f5e75a4ce4e9d4d58788bdca449a09195dd39d6f30a9f6f3ea4651a5f7579af5f66f865f8035ecb579500aeaea848ec22a1c28509389a28ba0f0c3c8edfd024e39ac7414bd27407c6e806581dd38938dd7635f12e798c10ce5c5fcad04d6fa944c54d3d713f940f880f73df41d837894bee51a33fbf15526a0f8388db54c10045cc33a8768a8d18a41455190515ffc3cdbf7cac1c97d9c7a7b1e926cb40d20e8192135c9cdc2617fc64b6dacebb20ddff767a63bf6c33171ad8c4e03dc3201a3c5c8a3782636abb4783adc5382a7fca5f6f9c1008aeddba797246f3fcaae8f13bee3157925c2dd228491cc6ea5d1fe9b89b45bd58427b2d95f40119597a9c78c1bd4f06b43b484f522637fe308698ee2435bda5e24f8910cffd0d2db0ecf218a9afcfd767e9bb68b3fba63afb2f0d070aa07cb30b1862137fd1bb874d4ac094dcb7325099164bf285b88aaf729510956841e33008652d00a75c74c6b376d9e3dbe327811e203751412cc0ac29e50c95555a4c228e66bf8f166ae2584b1be973ea410d7845ded367d86178b2c6c5680989682a28241cefcce32985fa8af2af9dccc74dfbb7d82f356f7dc6b34041541cee45f1ddacc730006b6168fa007b546869754334780ba319bcca68428258f5c887e6dc1fbc4470d3c0f8b9fea98f321a860791dab0135d0989d9fa0ec11906d97a60785fe366d5de17cd00b7d0f91d38bccf007d94bf8040397990fa7b6416e9fb1ef024d52b71b5ac176ba5d286b890254976c14980930c64239ac6589f6fde9e113969cae24badb7d5c068875021c145ecc8d71b402cc3799d26607b8c30628d3a562783029926a312cd8452df59aff4dee5b17fa6b386793238190f53076ec115ba1a8cbd8f76f5a7471f21a2956cfc4ec04426ed3117251718900093080c15adc617b1df078d76e59e069296e94ba450a975fb9823b6b4ea81a3cd142a8d1402b87c7444e9fe91ce489701b0eb98e13c82631c41d6b80fde40aad337049f57bb1883f38e5d0e283f52449743593b95ba8e53aa4a5c14e81611be13a853ffda03b4ae7189db04bb7200c64f9428886c8dbc153b0a7ed142cda8ce73f1d61c6f3633c0e9c7d79a18fe59cebd9c7e5245865673873fe7b8385adda3d052511700c25a7e70273b0c7eab1697704190aacccf69cbc5f7b574f6d49cabc6a63ad95d8baa2019976ec2b77ab67fda1805f21fdd400a63cc52eb4cdb11fe0bebce7ee5b183c80108b682838660e906016cb11e91ec2104482643719ce2434f2faa9f0c7801cb5d8901b1e9e09e66dbc127e4c347fd602efcd28d450195119ca22c518c8781b1da2999cb1228b03519a7f706703b83d79dab952b2a527a717d0e4541f32d5e11c9dcd0ed22f2368bc6bcabefe064335e62c7f53670a0f11809ff4de2a3bfe3b36f9916403d6e109cb1c3461fc727fe6c86a1be4a8282264007a3b016cd5e6a69dc6c0be932abc8a849c7594092b26baccb8de193658140dc27b264053822a513b7f812a8b1f2588632026cd81f919c0a92cd31c4e579bad8b1771b0b0a452e4d329bd5cc42f78c6ca4e3dff6a95d093ee099d7a83b487532e4f002011110011536d481ff03b880e385c37cf4c75b73cd4894151ba61e4cb98975e00ac357fab60450f6de193204699371f0f08cd4501d0c894c7a4e0f401af30c23b51e196e8162c72275a01386e7f1f652212f723900588eaf12fe4a41c0892115b91b2a5610952d228bd272729c13137a428fb47284fefbf4f6043b83371ecec8c09ca77ce43e69546c1c0ea783aff24bf1334d34df4c934fca2bbf11deb0dc505b2280a473b0709f5019ca1928f0f33c91524fc187aab3241bc873569be04e66b0fbab365f3a299b09d2b7c5d82080edf9c0c776505d130cfabfc2b16c2f850246dbd43f0e946ed2ec37e53f096cd9ff8798c75a6a57b06c179aebc5ff5e7b004e2ddc1df206b734f0a6951732ce63434787678389541e8dba59e05b5035d7da7cb722dae3f483a094c6bdb6bdfa191facda2c23c0aeb9c4edb2b5ddca10cd4a4d7b36f569b47b4c03f5058f1b33f9fe43925e24d24db5b36f50b11191d2c07437d3b33b3b090e1133985e3447c2f5d2344a084c5a58bb719327b4b5c2cbbdb287bb917fcf0dffadddd6a2a25ef846b38c079a07aae010f79a6db1204425dc44d879b4ff0f08e55f61f3dcf42b85a8e2c197a657411f469bcaa2933b973636342fbfb1608b647ba0470dffff1c578b3e46152f0998262f600baac4d0ced86d6391b9a47be5ea74544a68cf5f622f76a5c96eda40c6af53b8556e5d2647ac1cefcce5033037d6629a9fc362940fc6b8bc92019988e97fe74b9971e7713ee533697c6a2d7b3b8167c63eadb2678e53a2affa0e532d6db12648860d8095673515242af20979565b838607e43f2282adefc4f4ab8575d5038c23874c6a38740c35fa105394735aa6ceb4b627d19597544fb43c92468084cf1e29b751e517bdbca200958b44bf50ab4e9a8ac62b1e4933bbad3f5c0bae8c59597afced17bd966b1cfbd2a5751b6a72038598aef499113a77fd744bb3b5579db8f85dac349c7e4c9b62feebedb6ec6e41d16d3c142f4faab178c3e331365f875871a48391371eeb204bdbee911347027b9c7c19514780c1245e97deee83c879393e7f097aae103e80d1c749124ef1364ea3d1208886173ae8ae421ca68adbeafb7e621319fd745e2d68b83e37f8c3121af01e5136c091bfd32d2943e07dd84f8e6286015e1f961455e88bcf4d62c1db83127f6c4d8a0140349cbdf14d74d106c89b21f3a93f81feae3ef2d0c9777b8d387cc91c639d07d74f7d8178d71dc87834890e978322cb6e2fcb6b5e6d2a740770b2f07407a312d7dc4fdac2af046d0a703b4d40a4f62e177d09297551756307a55d6f017c33f08f6a5f8d30ca4868202572d549c0866cd1afafd02786eebe65aeeb90bbe17c5f731fcfac0638480ea8e0d5f822f1d6fb0d5d3834546301435f3435484725f030649eac5276f53cf458fa15092e3a966d5c06fcd84bdefd8caed89b315cfea533b92141686da1546d37d11846655c1fbc4d6e186df37d32ee578a428c62123655ff9c747ee748cf1ef372269ae2220598ff2365e6cdbfc6684ca3d8cb5660c14e0cba1f56660f14111593d881dd9294361e300182c022844a34a0675e8487b90639bb403f8b59b2f762d8d1eeb18ea2823a40cbe7aff3129f2f3f7236c1fe11756d1d2ad9bf8cdadb9b50f7bf71096ed827fc0642e43c0560f191771f8c6327a41edb71b4aeea2778ef2a2da9da39f13f25897ab321a425ee37d4dc9aa7df57dabb86eb4217a70abddd8f663c76d39e390274b55af1c689f35d436a9b24403b0ab6bb9c943f03ef5a9dd930226005bb5b4c5f7052c89160aef8dd92c4fec74bd0e55a7a478b01359b44a6354866f97cf2ce1b202c56248ec3ae083f555b95abc96dc632fc9f29ddb946c82fc51d993021754a786210fb90d2998fef40ec2aa2c6bc5dba44d551873fa28b23e245047000cfde816969b4014b60b965f80a63a9cf1fcc721e294bfe6f46b2037a7882fb1733a2737f76841dc51253f6232571206156686a0fc72dcc612e92c57395e09526cb56a9f927224db55eaecf630dfb0baf0cc4baf88f580d0c288cb36bc9cbe425525cce427d2666b4b06cf4490d7740c88fa30bf38a3f6d9e22c1e3741ec9abc50a86f24aaf411c122e8f7fda4419e57615514f780af63493649890ab401b6f5288c0e512e6b566f7fffb49329f93f54ac5aceda11c10fa80d36bb3dc8484331d7f942ba2ce79c09b4a2f37f129e258f0129dc727659f3337a3830162473291b926a5fa875fa06d3cee7c1177eb0ec995c0219cee584cf0e8ccaf991d7a8297ffcdb9360622d3de35183dbd7fe1eb3729221047ef0abd21381c79ffcb542920f73e373a669b5b3a55fa893e668daed7fbb4a7205bc746a3103838eed8452a0a1f85bb4f38ce8d951805075d1bd3572fa2e0eaad0f093b346249372fadf6a2312adf0e477b1a14a342ad90eb37f282d11de0939c5a9c301dc98d825aa6d8affa7b095b8abae69dde9ddd95f8a472303e19e33460b2d6891cb862254ff0e4b3f10d731c9333b40f562525dbb81c0e68bf8e2efa7493fd0d2d56212ca5236c90d31bd4405f0e4641ff3255b0055abbdb5feea36bd6424ad9379d2ab16cadc5c81b5a65c7f8b9edee93907a0e1f25a3823c4874c33a398a4ffa0b161f9f717ca66a15f43173657fb8fae8c55e7397e4c5537d5a4701c108576e22db4e8623785edd0545423d9e139981d0415cce5b6100f28dbd7033d9907815811e294e5cffbdd04c452c09305758193c9f2778da03e8f1c67d3fff248955cd37a428e9a31f4458fe80625416c30a86941caf303911a07150f7522c70c61983e9f4b00b63b9ee9905bf541313deb9f52f1c83a67f17f91150e4736a52e7b2fe0d2fa3088e850856096f8d2d87d4243e7b6632895cecf062fdd22d14238bc11c7fb2d84682e8f28d12ebfc3cf2ba63c2dec21676b29aad5962bedf33ea4db3df22f33824242367a1697496b6868367eb652caa8bb0c6aa3f31abb43f02af2182f7290ab95f4113d4c40859d520eef146fa0660513e0471f130c2e2d38f757a38ce53793bf71c18e2d31285eacf3bc8f2b9521340b006d04eefa30c69a23e46d0245343be158ef2b91933b8f8937afdb504fd2fa03a6ac853916ee21a617d4740e5ec3945f25d9be8be80b34621f7688be67561a7ca8e576e7b0fc8525ed4e543a30d1b7b85633198", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 229.335042][ T6801] syz-executor.1[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 1: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="65ad9333880189749b1db2804305a942030c54078d802fd1de553469bbf85c16d680e7bb018d3bfcf7fd1f5e664b5e896368ee96bb63eee9f47abe81bfeffa22f816f7f655de5b17de823e44e873677ea9c55a124c1435f4b40589006f28d2d8fccfeb162bfd26ef108218891da937ee3e121cc39a57927485de1343cf5d73a108d6e4cb96de7f08442dd79efb856e2b0051068cd09d010c46bef7e2d895c1058463c14edf77b2701636f0b9d824f118bb9637c6eb808a7b81cfbd98578b452dffd664e9c9aa474e0196cec2aa5c338206786d739a0abbf326baf2184ed135c3e032a1326ff4742aa80297f694b30f92af36c59e6ca8781f7c9b3d5130c96d1834d51af27bacaf3385a36b7f3b7ece7c15f12c0795dafea5186818831f8061914644a8e52976e7672e131f5b96a63e93c42ec41281675617467dd1e21418a0801e3f27f4206185d92bada9d949297411260d2222867303c13bf2eeb043166282eed3f671d89b37ccb1a3250830d6ec5765ef37120630b7bab7fed89eb2f4a32c8a6f403cb7a6f1ac6890e9e2c28c440c699f12fe5bf1cd565d3dcfed3fe37556a4d184fc8d94637d303291e9bd5912a4a75c78407426eb7a404e7c4bdf065db8ed27b09a8e4e9c02d2aef3d9db559d8e0b3737d8c09bae1d346283fc384235e1a45c76f31aba2ec977389004c6b6d7487a0d283f5be9f042b8983e4556be902f9b6fa74ce5801826add186c58530764a8e3e6e4aff09f39fe323eed4eaa750e93137062a07fd0aba55bc4c82d8f763905f85c9165c8c0b428e0a9769621b5fe8096ead7ac16f8aa7be179c6b67c3311b26052cafe58b3155cba3c7ae6b99cdd9bfba40aa2b10e79fdeed7231b5ed59658e43da84f1086c1621e50ce1008dedc3d74cab389f422dafb7d75c3eea107d07947805fb9fa58fe6272611a8d2bcae3c22609567dcb709abd99c82b861a7621f1bfee3d011c3881882ba3301118f320f739373a33d9a16fcfd58d89af416f49ccb09eb4af220c222e0e6f2c3374ef7a564ef02ceb63fa3f24a0c017f81a76e3533aae847911bc774886f1b689988bb5cac3c5b07b60d590679a851176a47d64bc5d33592cd6ffb99f56a6add51ca5d7621f32737f44757f436b2e599301e2a57619faba134c2f0307547d49b540ebb43c301b8380ad1b6b34425002b1c72ae0e1ece0c19223a8f0742fb69cc34d5dc66f041f7a75c95bfb7f83723032d3a16e2cbebc1d58429b50008f77192b2177e9fa9372904fad86f9a294040a3873f20b1f19c5f2c9ff65a732d88ba70578b919b46bc6d265d257fba94d0005bd246ced54944831cdadf78459dc84cc5cec32950f31270bc6b48903abba8c264d7fee798ffaba57ad4f555cdfad5f78a8e98437f0b0c45a2f1e3cd2ab2cac9b4507b5b604577ed4dbf849501301af94162f7fe1206b7a776dbf498f8a71958d8c2ac2c63b8247cd02da2889955f6f4311ec700c472766ec3e06a72ce48e9444633ee5969ad58cbe7d3a3648c57baae1edc6500ceb3d793c55b638c6769054b9b512b563551eb411322fa146e4b836b56e9ada14a7dc51bf19a3a613cd8c9c1effdab206aa45e8bf7b14f35a3dae70b0daa7d23471ad115c8d28ee40bbc5479498a15a7de24734d8590051afea4c1aaa3bee627291f9f16219b2a9d188bc9f4213488a6b7a1736c52b28f7a4b5e5b7f6cf4a01f8e8f89eeae2cc27e563210fa02b32728b894cd9661c4d85fb21fc889c3f2c5c1bee4aae345bc01a40da55714e19b0c9fd7f71107e54880c9f451c4739b71feb77dc1dadec915c92f6e9db2d25ae8c5161a11ea88b83a640d1bb2da1a6967f4bca0f62cc7ba6a449f85f22d90e9471364cbcd5dc160e4a38c52b53aac7b952a93be58b02682267796af98583a2fc64a9b33799b1e24e023d814d6846ee5230d870271adf3f8207b018e179d9ad59ec0f8671db258e86095d457a743a612ba5b21415ecc96803f09446b56c0803c2cd4d485e6c5724a8bc2bf5a5291f0cd5745596be0ddac585747b85f24a5ecc6156df545f82bb8385c2a31e014f59629f610ee96f9991bc9e771467382815eaca60a83ea7a505f72d8e2c2874da4a2ac1931c6d2efbdd1913a347289f3606b11021276b35b44d6823c1674d1965fc76b6d2ca7e6946437650bc73b5dc5511f46e140d301c144f7b9a98e0ecd37ea78a01d1116092c82a7f401ca9ec9c3753ff1684e8cbb4b9ca69bafbf119a5ae9b71f818a9270d71300b243b1ce3e1c7eeffcf6f08ad935460ee606bc78c6c9919a9d26c45da2ea2012fa19791b7f2d2f5d309250714027ee7d209ba81456840bceb89d9e846bdd8b763952d3641d40eb89da0013c4ce992ab46924a4959c2604df5ca12ca3885d7a8acead172a285f9e2c42f9ae7aaa5622f0ce526bb604e28ffcd673b7b7720b131d5273bd670aaad5e493d4167b93f58491cc181c15215a8e8f092aca519dbc90193100bded7fdbc7ee2cc1c110eb453d4362965532174a9d032af7293c9652716672acd92f009b8a80fbf313e4495a01b7eaf485129ab944bd13e601ce638aaff2237c0e9241dd31ec2bc846caaad7c3e36ccc607cbe914d3831b6290d71652fe2629d54ccb7f16fcb522b21628981dff848330da51f03901a61fbae6d4cb3141024b0362b16799bec82623ddf6f8d72d94c5e2694ce5a4798c4254ef1686ceea8e7643a2e078315f416cb026952c89feb5adddf251958ed671e0494d11d7ec0acdbe0ba532df46034a5a73d5f1d247c9e6bf2862b01accd84504f81b1ec57491a114954facda27d659a966c1fd42564fb7ee847140e4d50e89eeff657d95f8b04d0d65d886be1dacabbdeff4f38632fdaa4f4bf174010cc9546711a2cf1c8f2969ba94fb456bd36631997ec6f35c20baac29cdeba43f531b3770be2aadde375ca9e5b3bf8951b18f0631d69ec48b3e922cb053faf32e580dd065d8f19b968a9541ea03fe96f1ffc5e3a442ddd69b63cb11f7911256316b8da387ed308f7eeb94404106e6a6b7022d6fca1cfaf2e90abceb9b2be046201f13c0a9378470bf13466db16fcef584399380113b20a3c05128a57a776d489f13a3476a15d724165c9512f0bab1d429848e95d0e8f6d07638da6b39859811cbf8ffd5b6a04e04a3e3676b7e40d05583009fe16a0c1c1d8dad56ab5ba5eaa7ed9703503381bd7fd609c9e4e514c6554f9d62be8b2b4c5f10314f528756bf9ae6fc0376ce78287adb2eefe88bc1ee876de3d0e8ef4ecc58313b9c0e9065f5396e6b90cd7d14e5f7b48df5e1d7f04e86419dac5888d8775a0617442e2bb705c5323ab211b2e6f07a9d9cc1b2388f2be8bfad4ac9fc76d7a5ff7ac0beb73d256340c2227556381c42fda1cae5ef9a812c0ed97b3ce4c631d63f8a5a3398a230824af2d35bdfe70323ade83ce4ae29700e194ed1c05515d221fcfd5a0333b93bb80a57bcbef2a21246f6ce87527ab742ec5f8bc8d609804e7f4205e12843cb1ca21d2b3a9e50b7bdb211b73b256eac36ffab8ac115f9949746ebd1782d4de79dc609fc9ce236492292ec783bccff0e8652e93ce870105a26da09c4cf67b2d7666bd4161f52f7d84d144b1b0ef03000000ee0ea466dfa9479fab295159f00ee7209544628d5e0fa5d91dcd2dca093d012df5144b54a343f12385df445d4665941236b50179b47ee561d52b6645184044db3e2eed66001a7da86bd9b3710fe39f32cf578f1a1ebaf45f43518d47b43a2829146a703cbe42d2b6863a84df4b3cb3ec07f2a10ebfb0f64000d9c244ff7482b8243ca0915326ebb9e623004ed48991cae68371f47a946a178bc823f340722503da7d03b50f1d078adaab1d07ef39d1d7457ed2f50c34a1fbd5ae656222f2a71c3a43a9af4bb5bbaa6bcce92d6515ee2671ecf5b6a5d7e15565a224f299d1cdd11ffad8cae2d56fcf2e4151db6446c4715769c844285f77e3d269ed7c02264bb9ff052bbe03beea8b35d15864872f64cf587d0c00d0e38a92dde19f093efe1440509f42792e1fd17eb3f237e38468e77f0666494e8cbe1bee84217e93af93cae90c0de0ea2b6843d665e9208fbb843af24bff66594e82a12b5b59d83c2d2ecb16110c651d0e0b7f7872fc11764e138ebf0fcd77470e0da24eff6698a25f4f251805e2b72a9c472596a2751ba50070d1d6dbcf5ebbbfc32e9492b33f24d7c6481dc4ba0e11bce80fc90f37d30e6713c95a0ffda4591990e23765f75a7c00974c92c5dc31a0426f5104f47b519eec45fbcbcc687966adbbe7f589ee9b340ffc16d0ba5e09fb0703fa00243a43572e2c8d4e769ac5c8f503f9de3b17b67986d8748a6914f629dd2d466c03317b72b8b3f06c8cb2af11ca7f990ba7a883ae4f4b9f5f9e048e6b991a57f84ff56474e7b7da75df1a6d66dec049ff4537ae07d36cce1613d4ed4b532f2bbb8bd018f9c126fa882a6d021067b03a878815d9f673831d2801f065450396224c54acb3c84b154e605a749ac42db4e49c45a0c61bb44f4083d35a221a8bff30282d44c4df07f3615ccd075b6ca881a8fbc209bb34e6444c0f04c9365ed53d6b996e46244e0777f9177453d42dcbb047521b9d7e87498f3cddc4803a639bec476871e9d7a5b9b483548567ebf15038b052ddb6bf51136ffe1f076cf9cc8d9875ce198a3d6fbda1c7fc322c53838f721a85c8482e84c9543067cc7950d5e5fd8ed48a581ea5b358b0b9083c09025d7e281c1a68949e6460d02bb03662fac6852905d891d6e8c43e71104b94ba33437b6fbd9b73e7fd46b589fa70b8e5503b4d8f78409712134d98de257fdc1916aacb12fe25794c1a200cdff98d562c05ce513b6f59e07a6125d76975a60ef136288d28002ef4b6f2c760559fff9dedc8e3fe33988e7d834a849cce47ea1ca9afd8a6eeb54aabd77373d1dc6e69aef186d5ec580de5e39876b82037970e6a2285e17768c6f34682527dd38d0a24da71e3384a29b94f2d14cc9bd74e4bab3cc848703e3a47cf0a8b36f4decc89363c91883876cf52c7f95cbfc1e546d9ef6528b98fbb2d078158ae153506be8bb7413d0f6b9f3c2abd9b57959892ae3f6571d26966c835f3cce4d51e3dffea75963adc4b72ae821c976c0781e4602b9c93299c0fb6ae7bb3f473c5e5e5da0f2c6e548fc2373d7b94f8decb162ad303ff943580da54352bca8ff71098ecc22247397505f743f1371630a1eb05ce11796cac3d68f785685de318dd8fcaadc437087935798b50808677f592699daaa1d535b96d03cb892cfd78cf3d8457b752b2e21cd868fcde04627a8562a598996d5a07db6bbe58360f74e023bfda0bfad549398874af251b04c4bd73a60fce67cc33e87ebf9e9e981ce76e5a1548c81bdc5b21a6cd575348a166678b94e9932a563b9a9091a93a0ae171925b822d42030df44aa326c4fdf7fb559b4ea6a7b68c2f1e32df8b6e08c0b2f257c83b23a024d47073bf9fd46e56ad30a7dda38a8ed2c1536fdc822b2d8422005fd357bd1bf0e27f33098df529a82b7c943d32e28386acd74258c1d81f3552c343dc2663956b5a3bcf79e50b66d8e20ab623ad9dc4f19c7b2a84437862756c0e517fc44050659e3c29a20e372e7caf6e3675eec653081fd4839c3469bd06c03e21ebdd90af52339b45ed9ebd3f1819a53e0fe150d2ef957831bf35ee13c8f00288f3d27dc5a57967e85e08718daa727ecdc19e2000e3634bef4779aad8b34404f2b12998d62ebc6b33866c88819ccbb475ecde60cd64ea23453e4f7c30fa3656b01363075d6507c5a44981187e2663ee5676f4f9e6623ba503b5c5aba6755fc248e2d1f824891a3a430d506fa753e96c4185dc08bf7773201bb087e745ad90f500b169da7f6d9f4a8aac6e0a64a45474c8592f177e0036bc6f99314685e5d633feeceb47188a45388e8395d143be717c80df34bcfb281a9aa0404c4f712e0dd6d69bf8ccdac4dc121264608fea11f789a6bd864524b0913ad0523f1eeeddf76262a93bd3ab2e184b43d82cf7a0fa81543600b7f3ba835632307b6e79127544e43436207a3d9411ddb2a6c42c320500073329ded84bd61ee51325c6fff6f5085696ab5068cec51b6cc524c104fb593abbf9851ac7437804f225a18a3711ae9a4383b37135172016cd401ea64c5a345db0dc13b8fca1cabf0ea10f07da4e8e9b4312165000f3bcab742e7765ebc7aa391d35eff19f5ff0bd02b802abef08c33a58c656cda5249bd294c7e807db30e713f880949bfc04d6a839db1b56a8144616e7d04b86711b8cf5815f955e2f3d813a7282a494a1d448a878171af29e91f5b0c944bc02d4e1d0988e5a4015baa51f5fb4b47a25879f9c174cef94908e140d12575dfe7ba2360730c5445d4869c7195a8c9f958cbf5a58065aa305b04b2df2bec4315d634c5f15be25ac1686d451f480fa07e2d3e46bd9103c61f61f27a29f135186f7692f3ee9134888225df57ca5643ecb8571a471ed999e09f98e7e0bbb975ba7d615ca19761349dfc35fc9502b53d95365044425ac98478c760dba154b37e5a4af907ea21a32a76da9809485c10d6905b03650e457089abba7213d9f0bae2bce5f88c8ce1c5cf189258a2d8cd378b044a5b79b090fbf18d3176437d6673ec40be49cf8610b9b4c825c33d5cf77356d5dc5446dd45631f837254104a49d438354539db92bee82eb85688a99f27a62f24e21c5c14c54f1b33ee2285a68351460661d54a4f43ee6a1f95d9ff5326882dbb08c15f9a36dc49f5e75a4ce4e9d4d58788bdca449a09195dd39d6f30a9f6f3ea4651a5f7579af5f66f865f8035ecb579500aeaea848ec22a1c28509389a28ba0f0c3c8edfd024e39ac7414bd27407c6e806581dd38938dd7635f12e798c10ce5c5fcad04d6fa944c54d3d713f940f880f73df41d837894bee51a33fbf15526a0f8388db54c10045cc33a8768a8d18a41455190515ffc3cdbf7cac1c97d9c7a7b1e926cb40d20e8192135c9cdc2617fc64b6dacebb20ddff767a63bf6c33171ad8c4e03dc3201a3c5c8a3782636abb4783adc5382a7fca5f6f9c1008aeddba797246f3fcaae8f13bee3157925c2dd228491cc6ea5d1fe9b89b45bd58427b2d95f40119597a9c78c1bd4f06b43b484f522637fe308698ee2435bda5e24f8910cffd0d2db0ecf218a9afcfd767e9bb68b3fba63afb2f0d070aa07cb30b1862137fd1bb874d4ac094dcb7325099164bf285b88aaf729510956841e33008652d00a75c74c6b376d9e3dbe327811e203751412cc0ac29e50c95555a4c228e66bf8f166ae2584b1be973ea410d7845ded367d86178b2c6c5680989682a28241cefcce32985fa8af2af9dccc74dfbb7d82f356f7dc6b34041541cee45f1ddacc730006b6168fa007b546869754334780ba319bcca68428258f5c887e6dc1fbc4470d3c0f8b9fea98f321a860791dab0135d0989d9fa0ec11906d97a60785fe366d5de17cd00b7d0f91d38bccf007d94bf8040397990fa7b6416e9fb1ef024d52b71b5ac176ba5d286b890254976c14980930c64239ac6589f6fde9e113969cae24badb7d5c068875021c145ecc8d71b402cc3799d26607b8c30628d3a562783029926a312cd8452df59aff4dee5b17fa6b386793238190f53076ec115ba1a8cbd8f76f5a7471f21a2956cfc4ec04426ed3117251718900093080c15adc617b1df078d76e59e069296e94ba450a975fb9823b6b4ea81a3cd142a8d1402b87c7444e9fe91ce489701b0eb98e13c82631c41d6b80fde40aad337049f57bb1883f38e5d0e283f52449743593b95ba8e53aa4a5c14e81611be13a853ffda03b4ae7189db04bb7200c64f9428886c8dbc153b0a7ed142cda8ce73f1d61c6f3633c0e9c7d79a18fe59cebd9c7e5245865673873fe7b8385adda3d052511700c25a7e70273b0c7eab1697704190aacccf69cbc5f7b574f6d49cabc6a63ad95d8baa2019976ec2b77ab67fda1805f21fdd400a63cc52eb4cdb11fe0bebce7ee5b183c80108b682838660e906016cb11e91ec2104482643719ce2434f2faa9f0c7801cb5d8901b1e9e09e66dbc127e4c347fd602efcd28d450195119ca22c518c8781b1da2999cb1228b03519a7f706703b83d79dab952b2a527a717d0e4541f32d5e11c9dcd0ed22f2368bc6bcabefe064335e62c7f53670a0f11809ff4de2a3bfe3b36f9916403d6e109cb1c3461fc727fe6c86a1be4a8282264007a3b016cd5e6a69dc6c0be932abc8a849c7594092b26baccb8de193658140dc27b264053822a513b7f812a8b1f2588632026cd81f919c0a92cd31c4e579bad8b1771b0b0a452e4d329bd5cc42f78c6ca4e3dff6a95d093ee099d7a83b487532e4f002011110011536d481ff03b880e385c37cf4c75b73cd4894151ba61e4cb98975e00ac357fab60450f6de193204699371f0f08cd4501d0c894c7a4e0f401af30c23b51e196e8162c72275a01386e7f1f652212f723900588eaf12fe4a41c0892115b91b2a5610952d228bd272729c13137a428fb47284fefbf4f6043b83371ecec8c09ca77ce43e69546c1c0ea783aff24bf1334d34df4c934fca2bbf11deb0dc505b2280a473b0709f5019ca1928f0f33c91524fc187aab3241bc873569be04e66b0fbab365f3a299b09d2b7c5d82080edf9c0c776505d130cfabfc2b16c2f850246dbd43f0e946ed2ec37e53f096cd9ff8798c75a6a57b06c179aebc5ff5e7b004e2ddc1df206b734f0a6951732ce63434787678389541e8dba59e05b5035d7da7cb722dae3f483a094c6bdb6bdfa191facda2c23c0aeb9c4edb2b5ddca10cd4a4d7b36f569b47b4c03f5058f1b33f9fe43925e24d24db5b36f50b11191d2c07437d3b33b3b090e1133985e3447c2f5d2344a084c5a58bb719327b4b5c2cbbdb287bb917fcf0dffadddd6a2a25ef846b38c079a07aae010f79a6db1204425dc44d879b4ff0f08e55f61f3dcf42b85a8e2c197a657411f469bcaa2933b973636342fbfb1608b647ba0470dffff1c578b3e46152f0998262f600baac4d0ced86d6391b9a47be5ea74544a68cf5f622f76a5c96eda40c6af53b8556e5d2647ac1cefcce5033037d6629a9fc362940fc6b8bc92019988e97fe74b9971e7713ee533697c6a2d7b3b8167c63eadb2678e53a2affa0e532d6db12648860d8095673515242af20979565b838607e43f2282adefc4f4ab8575d5038c23874c6a38740c35fa105394735aa6ceb4b627d19597544fb43c92468084cf1e29b751e517bdbca200958b44bf50ab4e9a8ac62b1e4933bbad3f5c0bae8c59597afced17bd966b1cfbd2a5751b6a72038598aef499113a77fd744bb3b5579db8f85dac349c7e4c9b62feebedb6ec6e41d16d3c142f4faab178c3e331365f875871a48391371eeb204bdbee911347027b9c7c19514780c1245e97deee83c879393e7f097aae103e80d1c749124ef1364ea3d1208886173ae8ae421ca68adbeafb7e621319fd745e2d68b83e37f8c3121af01e5136c091bfd32d2943e07dd84f8e6286015e1f961455e88bcf4d62c1db83127f6c4d8a0140349cbdf14d74d106c89b21f3a93f81feae3ef2d0c9777b8d387cc91c639d07d74f7d8178d71dc87834890e978322cb6e2fcb6b5e6d2a740770b2f07407a312d7dc4fdac2af046d0a703b4d40a4f62e177d09297551756307a55d6f017c33f08f6a5f8d30ca4868202572d549c0866cd1afafd02786eebe65aeeb90bbe17c5f731fcfac0638480ea8e0d5f822f1d6fb0d5d3834546301435f3435484725f030649eac5276f53cf458fa15092e3a966d5c06fcd84bdefd8caed89b315cfea533b92141686da1546d37d11846655c1fbc4d6e186df37d32ee578a428c62123655ff9c747ee748cf1ef372269ae2220598ff2365e6cdbfc6684ca3d8cb5660c14e0cba1f56660f14111593d881dd9294361e300182c022844a34a0675e8487b90639bb403f8b59b2f762d8d1eeb18ea2823a40cbe7aff3129f2f3f7236c1fe11756d1d2ad9bf8cdadb9b50f7bf71096ed827fc0642e43c0560f191771f8c6327a41edb71b4aeea2778ef2a2da9da39f13f25897ab321a425ee37d4dc9aa7df57dabb86eb4217a70abddd8f663c76d39e390274b55af1c689f35d436a9b24403b0ab6bb9c943f03ef5a9dd930226005bb5b4c5f7052c89160aef8dd92c4fec74bd0e55a7a478b01359b44a6354866f97cf2ce1b202c56248ec3ae083f555b95abc96dc632fc9f29ddb946c82fc51d993021754a786210fb90d2998fef40ec2aa2c6bc5dba44d551873fa28b23e245047000cfde816969b4014b60b965f80a63a9cf1fcc721e294bfe6f46b2037a7882fb1733a2737f76841dc51253f6232571206156686a0fc72dcc612e92c57395e09526cb56a9f927224db55eaecf630dfb0baf0cc4baf88f580d0c288cb36bc9cbe425525cce427d2666b4b06cf4490d7740c88fa30bf38a3f6d9e22c1e3741ec9abc50a86f24aaf411c122e8f7fda4419e57615514f780af63493649890ab401b6f5288c0e512e6b566f7fffb49329f93f54ac5aceda11c10fa80d36bb3dc8484331d7f942ba2ce79c09b4a2f37f129e258f0129dc727659f3337a3830162473291b926a5fa875fa06d3cee7c1177eb0ec995c0219cee584cf0e8ccaf991d7a8297ffcdb9360622d3de35183dbd7fe1eb3729221047ef0abd21381c79ffcb542920f73e373a669b5b3a55fa893e668daed7fbb4a7205bc746a3103838eed8452a0a1f85bb4f38ce8d951805075d1bd3572fa2e0eaad0f093b346249372fadf6a2312adf0e477b1a14a342ad90eb37f282d11de0939c5a9c301dc98d825aa6d8affa7b095b8abae69dde9ddd95f8a472303e19e33460b2d6891cb862254ff0e4b3f10d731c9333b40f562525dbb81c0e68bf8e2efa7493fd0d2d56212ca5236c90d31bd4405f0e4641ff3255b0055abbdb5feea36bd6424ad9379d2ab16cadc5c81b5a65c7f8b9edee93907a0e1f25a3823c4874c33a398a4ffa0b161f9f717ca66a15f43173657fb8fae8c55e7397e4c5537d5a4701c108576e22db4e8623785edd0545423d9e139981d0415cce5b6100f28dbd7033d9907815811e294e5cffbdd04c452c09305758193c9f2778da03e8f1c67d3fff248955cd37a428e9a31f4458fe80625416c30a86941caf303911a07150f7522c70c61983e9f4b00b63b9ee9905bf541313deb9f52f1c83a67f17f91150e4736a52e7b2fe0d2fa3088e850856096f8d2d87d4243e7b6632895cecf062fdd22d14238bc11c7fb2d84682e8f28d12ebfc3cf2ba63c2dec21676b29aad5962bedf33ea4db3df22f33824242367a1697496b6868367eb652caa8bb0c6aa3f31abb43f02af2182f7290ab95f4113d4c40859d520eef146fa0660513e0471f130c2e2d38f757a38ce53793bf71c18e2d31285eacf3bc8f2b9521340b006d04eefa30c69a23e46d0245343be158ef2b91933b8f8937afdb504fd2fa03a6ac853916ee21a617d4740e5ec3945f25d9be8be80b34621f7688be67561a7ca8e576e7b0fc8525ed4e543a30d1b7b85633198", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) [ 229.335092][ T6801] syz-executor.1[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.396785][ T30] audit: type=1401 audit(1847638870.063:285): op=setxattr invalid_context="" executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 229.597404][ T326] usb 5-1: Cannot set autoneg [ 229.601984][ T326] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 229.610457][ T326] usb 5-1: USB disconnect, device number 39 [ 229.617375][ T358] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #100: -71 [ 229.632592][ T358] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 229.640600][ T358] uclogic 0003:256C:006D.0061: failed probing pen v1 parameters: -71 [ 229.648958][ T358] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 229.656130][ T358] uclogic: probe of 0003:256C:006D.0061 failed with error -71 [ 229.664088][ T358] usb 4-1: USB disconnect, device number 39 [ 229.670054][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 229.679133][ T6] usb 1-1: USB disconnect, device number 43 [ 229.917337][ T1439] usb 3-1: new high-speed USB device number 42 using dummy_hcd executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90, 0x0, 0x7f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 230.156987][ T6816] syz-executor.0[6816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.157059][ T6816] syz-executor.0[6816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.177321][ T1439] usb 3-1: Using ep0 maxpacket: 16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 4: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) close(r0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) [ 230.250472][ T30] audit: type=1400 audit(1847638870.923:286): avc: denied { connect } for pid=6825 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 230.304995][ T30] audit: type=1400 audit(1847638870.973:287): avc: denied { map } for pid=6830 comm="syz-executor.4" path="socket:[39829]" dev="sockfs" ino=39829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 230.348383][ T6834] syz-executor.0[6834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.348452][ T6834] syz-executor.0[6834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.367433][ T1439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 3: userfaultfd(0x0) epoll_create1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) close(r0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) [ 230.390174][ T1439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.400781][ T1439] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 230.409758][ T1439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.418478][ T1439] usb 3-1: config 0 descriptor?? executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_sync_fs\x00', r0}, 0x10) sync() [ 230.537350][ T30] audit: type=1401 audit(1847638871.203:288): op=setxattr invalid_context="" [ 230.547331][ T6] usb 2-1: new high-speed USB device number 39 using dummy_hcd executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 230.737319][ T358] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 230.787321][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 230.887955][ T1439] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 230.894735][ T1439] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 230.901543][ T1439] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 230.908300][ T1439] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 230.915065][ T1439] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 230.922279][ T1439] cp2112 0003:10C4:EA90.0062: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 230.977309][ T359] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 231.067381][ T6] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 231.076301][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.084159][ T6] usb 2-1: Product: syz [ 231.088054][ T6] usb 2-1: Manufacturer: syz [ 231.092458][ T6] usb 2-1: SerialNumber: syz [ 231.097421][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.107380][ T1439] cp2112 0003:10C4:EA90.0062: Part Number: 0x00 Device Version: 0x00 [ 231.108574][ T6] usb 2-1: config 0 descriptor?? [ 231.120852][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.130514][ T358] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 231.139355][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.147723][ T358] usb 1-1: config 0 descriptor?? executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 231.227314][ T359] usb 5-1: Using ep0 maxpacket: 16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 231.270834][ T30] audit: type=1401 audit(1847638871.943:289): op=setxattr invalid_context="" [ 231.317358][ T1439] cp2112 0003:10C4:EA90.0062: error requesting SMBus config [ 231.324780][ T1439] cp2112: probe of 0003:10C4:EA90.0062 failed with error -71 [ 231.332803][ T1439] usb 3-1: USB disconnect, device number 42 [ 231.507380][ T359] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 231.516286][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.524177][ T359] usb 5-1: Product: syz [ 231.528142][ T359] usb 5-1: Manufacturer: syz [ 231.532640][ T359] usb 5-1: SerialNumber: syz [ 231.537769][ T359] usb 5-1: config 0 descriptor?? [ 231.627421][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 231.636688][ T6] usb 2-1: USB disconnect, device number 39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_sync_fs\x00', r0}, 0x10) sync() executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a308ad9b1827a469a4e4ed967616e7062016a5e350c162fdc58b0b90105cea6768953000cbb34134fc2cb13b7c713e3db470c316b9557fa46f0be983001c7cc2cd78a54416a27679b6c20f041a578fe08f148e0c64d22414f035084f80b727404f6d0f09fa16f4ecec198cadbd1fa5c235f00cfa9000000003e0e5c571d516caa5ef01b08503ffe96e9488e8b18c31c0a821ef6ee9cca78b8a2e10be7ebe14bba0c74cebc98a23135aa62f74e9c052fec8bbda9f233310528a32f31"], 0x4) write(r1, 0x0, 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) [ 231.875503][ T30] audit: type=1401 audit(1847638872.543:290): op=setxattr invalid_context="" [ 231.908495][ T6893] syz-executor.3[6893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.908562][ T6893] syz-executor.3[6893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.007398][ T359] usb 5-1: MIDIStreaming interface descriptor not found executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_sync_fs\x00', r0}, 0x10) sync() executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a308ad9b1827a469a4e4ed967616e7062016a5e350c162fdc58b0b90105cea6768953000cbb34134fc2cb13b7c713e3db470c316b9557fa46f0be983001c7cc2cd78a54416a27679b6c20f041a578fe08f148e0c64d22414f035084f80b727404f6d0f09fa16f4ecec198cadbd1fa5c235f00cfa9000000003e0e5c571d516caa5ef01b08503ffe96e9488e8b18c31c0a821ef6ee9cca78b8a2e10be7ebe14bba0c74cebc98a23135aa62f74e9c052fec8bbda9f233310528a32f31"], 0x4) write(r1, 0x0, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r2, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 3: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 232.158061][ T30] audit: type=1400 audit(1847638872.833:291): avc: denied { map } for pid=6905 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.181626][ T20] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 232.211393][ T1439] usb 5-1: USB disconnect, device number 40 [ 232.427307][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 232.437340][ T358] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #100: -71 [ 232.446060][ T358] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 232.454035][ T358] uclogic 0003:256C:006D.0063: failed probing pen v1 parameters: -71 [ 232.461860][ T358] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 232.469303][ T358] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 232.477160][ T358] usb 1-1: USB disconnect, device number 44 [ 232.587346][ T6] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 232.707439][ T20] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 232.716383][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.724620][ T20] usb 3-1: Product: syz [ 232.728569][ T20] usb 3-1: Manufacturer: syz [ 232.733063][ T20] usb 3-1: SerialNumber: syz [ 232.738000][ T20] usb 3-1: config 0 descriptor?? [ 232.857330][ T6] usb 2-1: device descriptor read/64, error -71 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a308ad9b1827a469a4e4ed967616e7062016a5e350c162fdc58b0b90105cea6768953000cbb34134fc2cb13b7c713e3db470c316b9557fa46f0be983001c7cc2cd78a54416a27679b6c20f041a578fe08f148e0c64d22414f035084f80b727404f6d0f09fa16f4ecec198cadbd1fa5c235f00cfa9000000003e0e5c571d516caa5ef01b08503ffe96e9488e8b18c31c0a821ef6ee9cca78b8a2e10be7ebe14bba0c74cebc98a23135aa62f74e9c052fec8bbda9f233310528a32f31"], 0x4) write(r1, 0x0, 0x0) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r2, 0xffffffffffffffff, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b65, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b65, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 233.048771][ T30] audit: type=1401 audit(1847638873.723:292): op=setxattr invalid_context="" executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa54d2ec76d67b773d86e1428aa01a11ce416b59a06a42e521f835c866b890581f6644c5367c8a43d05de13d77f1655c9a398df585bb4ca9c7acba15600afe7e02a8f9424e987ebd4fcae2f05d4ad3c3b3425975d1f119211790f3b9b6d1da1b887b237504d0338a90fceab8c4394017eb7608061963a5d965a478c2d559c5e7ce7f1c131d49a2aff6bfc04e2928fbc52a1ee7aa0c8cbfd18b6befb3140b1f0f9ca8c668cfa8b92f0c1511a352224ad85084defb8045ea0df4caed2e69b6661ef1efc0b1c28904361bf2cad6ebc6ca62c54c9a0192f53d2bd0e944d6027852a05c0e0b684a1da90d23b21da5cb053b6405b195566f5de35993cd058266c115f30feff34256d29babac67918db7bd4c38b200ac1ae856247375ea429d32e7dbd08dd8b511c28df383047a9ceeba4f05a7888382165541d37804892b08619937887092dc389ef322397c73e937c6c037a766e00189feba6c5bf4d318a3fa30c54272a060539a5b227736cca9bacc90f49468bd621999a11a7e809dfbdc847c389213088e43125e22de8de35765798f17e875e0a12f93a8cef16aba698eee1777dae204053108c083d003d5a12d51ad727b14346ac3991d40b105ad6617abfad112496ab4f8cc97c9bda7c96756e80d48ccc041e1ed343684412e7ad300cec0e26cebceb10e03e4b2bb2bc0f7bf3199435ab9e6e3d553210b21cce7242b51f78338693b66d63232b5580cd373ba33d1be3b672f5c3faa62709ba5dc9a0b152c020bb0635991076a69de7cff29daa84c6cad15bbc4558e2bf35f4e37bd087a90b9f3edf2a7486648b7628c634138eab155b4db38e7ceff2da542d2478265c5490fe2fc38cc78607a31a9e1d615a34314429484defa00bedc41436f6c950f725de914fbac82999523e5eadc62da72ceead8d2cca0fd13fe5f08ea8b47f8b770770e1a916e22f0c811661dbb4dabc7d8c2db2a1c3b79d62222e29a60f78f58fe2bc9faf637aa6f94cca8d1adf0652b50eb12bd895271ce5b72712f61208b3cafadf4174bdc54fe37d7e57a00efc8fc28ca850d8ad278bd9bc3b63d261b730ccb51a8df02804fb37d0c511837dd8b774d9ccfd4bd4737e61b1d3faa23fa01dc719aefb02b27e01ec8af988c8d6fb385d2df8fc8584b64ec86459539c8c0d52c53faecc9bc21240e73373816126bdd890eb6f4bea4824817a549a24a3092e6a7faffa564a4cf7b3ea19ad852aa64d439231181c1e2a953b4cf84eda7942473488a1fe4cf6d39f0bd8db15f45bd0c5b4f5f780472987ec3d8da699bea74086a3b0c05734965a8d89c072198845e747fbf77a71f74fa92f821aa346c5bf0d4f0a5f79d054dcb7c8f14314599196709b15be8f3c031b859514310ae4b286ea8cdeaa8897e25c51795842c7e50ff12b98605ccc79669f7ed0ce7a705c950356a7db7149fa467119004817d1e94ba13c849c5b93eccbd146c44e8d1bebd57c69ef437721faf193f713f047ee4dae7738a51eae9ba66b0f10c1515554df0c60661708246b44c7a96095a68d03900c1fac08006c59655a6afa0f677307e5905fe37962f8091ee5df90b587b495ba2ae1da34d1a78b93b0d93000e26a012367e2e4470ea65261d32243c3a5b1e386369a6befe1c94f7cdfa8a318f7ee88111ae7d7b14d5df186cf2643fc7292091cc284db64154ed61ba4e814d77d7caac646bcbe0da4508878a1cacc60b589bdcde4d31067734ba39318a2bc57d4df172880985fc1924b9d208bbdd3bf2e767f698288a491b9bd4815c4ac5c32b93e33469db470a70f67ddae227d81addd5f80e23849ee031567aefcac1a38b6627a360b9f4b1a22047f08339c3f5bedbd8b47a8f6a482bca452384dd386cb0409b76f0133c07ffc70097ded1b28c460b4ced3bc8f1b6cf5e984cccc2d74c0fc7f52b867727dc6ecc4c586e755727fe547483829690e28aaee4cc5066aba431f273988906c5a81f80bfb4676a6734741fd7d5389ec3ede2ca42c9f5ee767e8928c1a0b3712b2a7bea521681c0891bae3f02b5209823195b04228bd4d61074ad576d73c2dcfcbb345d3b5493c55e1efc8b1972a2fe0ed0a01afd578a486cc5007adadd89837271a54f02539f099ec31b820bff51b84615e04c799cbd44a03aa014cc5003e00d31f58527a147cac1f39e6032b57bb9c750c6cae89e9c4edcbad03b8809656914598e8628f4803d953e339f986c3c7920fe62fe093bb0b4f11c4602ec8600a2fe13151672cea1aaa25001346d1ac6ef26f58d0493c82e47c9a0992db252b68bfd5b34877338f033d36751904413bf408aef2533868a242b8ac46ce6263241d95c2ed7c121047c69a51de435705872717950f9096a791b175c734a897424c6ffa5255d6410f7166f8480d8f2f8faa0746bebab82afe96c28702a122570800e26975ab08a84b47a31d01ccc28a1c81671faa0084ed6f590a0595e2d222c2ba8212d53408a802474bd6da8005b991240f3293070c1e4f9209994d052996a8c10ff36c129b62c9109b0a8e001ca355e1d2b2ec3724973895b964b0f6b762adf19e685a72a0cd26f28b8fba3c528d764e7b39b1bd1c34162250a695bbb81910bf545ff1d1887b7dc436c912d0f2d69e21f292d482eb0eaf32aec6f667b9518a283a236316683816eab5520e47d6f26c0763b29de8c8a016303b2d75ece7833a5ccb4f22c106d2309c4e82148a0449ba0c2ab2188f91de5a5e1b4d5555e80ac616cae787917faa1484bcda4a27f9677afecb8b57484f6b1dcb9eebc9447cd1e7f71c751d9b8f7da1d5fc34f6f7e86a9f2179f0821099557d41a26d6020e40c02bcedc1a1921c7033e5ff7d4ce7e05f864c96c0e101d83547512eb3bf7d1c1fb4d846c1da51bc3d865baaab5420f554f8b24331991c64c420068192456386e3df83b1ae76221ad9e064fb9b4479a84e8cdde28b725c128635db8947efb1ea00560e75a24406ad316e06cc4cd84dec680e2c33c5be06991247520e4a63241db7e6dc32d5a22cd565132beece00dc6ad4a945b4af3fdfb4e211ebc8710f02006788b2a8a94b865b57e81a099f00bfe66e5701eedb3552b1aa9d3bdb505674b8dcb9c42c0be379e6beb874f8404d78acb9a735192a4067dabc3cf90156d3ecf32e92d3bea14eafbf72fa2108c550d248ce1dec0fcb7770c3e82ff49e988bb55a4b9eacc73cde0e32a99d33ebf44ba387f99329c482c13238c411e56bb6a1f58f329be646e926c752e7a6ae4976b14eacabc9cc2f058c928caac448d2ad4c76880d55db1bc8ec91b4a00bd313936f17ed937546936baefb0f7a22ea7a918e26ac7af91ee0c7cf7af414cd81b263d7e56b7b24653118a95024ecd37790094201e495390e2fafd849696222d25c9c5a8fc763a9b99f1f1cc6c41dfacc809fb4b83f18d647ae1f21e09cebe49d6b72bd619f76a603ec6a5657ba618a48c09f4ab8c9071dab61d0bcbdce2f6ed3f4fe31495b56febc67008ede7895f1674bfea806da26e1e1587c40a89fe196e25b0f9ebadf6f25f6865c9a174fd5b3254e8eb23865831ae93b229c7e5304746e86a322900f1457c96eefcc7fdc9d07a871415a23be4e005e114c1440ec4d48cecfa5deab5cfa216771ae31663260a3458a02bb2e108492e6313ca10c003e80b08dd99534e1272edfcbadd975f721f1be3073b44323e040630834fdcb6b33502257c7796e7622c79fdfd1c997a04b65fc3571e0f3f520537b271b7a558dab487e22f42a4756ed477c4fb8bc4d1d9968b47491ffd173a6e76b58053127a0a482f667d5196cf6cbf6b8d3207b4466c2b77de55b349761e5852ba6306103992868469598ed3720d73351611fd755d005716d1e68124f0142233182092d64439bb1e0354cdb12eb736ca680885bf59ab1cd6f636a119f226811de9fc1d2f56f37ffbcc44f3ea8a6bc94f9b460754e28e0305fceed27db6cb8e873c55259b33e95020ff8cec9f6ed5573198861a3ff0d29465a15a392d1c9ffcde018b04df0e93c81bc1aeae503ec2e6092a1b8bd74e430332f49098eff808fc3e61ca9bc1c2f8455eda28c273c3cb71a04e5d977368f7d28bbd909bcf89112190e88f6a91c8f56e9bf62e6b08d9fceec7280a3adf70041e42b2b6f6ab254bcc863352c5a70fd196c8c47d3a9dd74e8ed8ac706f04091d39efd87f5fbc5d7ffdad770929b7f69344479d1cd30a012964ac6445f8095f07ca0084fe79ad1cc59e552f1496940b7f2d7ce0978e7e9b2bb0bc2409edfe1724e58428fe9f51a3bb1cb1ab5b278f8d17f5f38e220cba105c87c0e38f6299d66f980b04c1f0807afb467f6ca712e336d87b4354df02683326b654f745420c249300c4e0ea0d5942dcf36cb95c90a43e0a40b9159a46e7230ffe6543cb2c78dc69c61c03acd234a96f707abc53e37007968aeb9c27ba98e13d84922d5d92988a9373cd72f0cafe57a3d153b510a2a6373d84be861b7a509e2c2798aacba6ceb7d32ac73c22e04d11222a52dbf21afbe35910261f4b0a45bd9738c94111ea24192eed7ad0ffc16cdcdb55be5bfc4d26b83f1f5f6b4f16461e89f8fbab93a3a4bbacf2089ebc2b135c0661171d1beb51e3148eac2fc7a3ef1bf13d6251bad9676da10b75c6ff94a6b80aa1663c781c68095f534c027a946fbe6226a9e3b20f6efcb98ed348416b82d968af4123eaa09b2b5cf401659394628ded305c916a1c6fe48def4d29d604f37c5659cf758a1b8746e0b10318ad9b3b1179a75c753e1ce94f5be037efb7b4380ea52ce86260fb836c5c659261f7975c9f72bf0cc0c3a8c5ff0b9b86da6fa470646fc5c1e752f8c582dab3725a5f9039d3aed56ad9d0509278cca22618c04896f09b0b2924aeabb56180eeeb76ea721f10f82c556e66ca693fe68b04b7b83b024dbad69993dcd3ad1d5f8dc8a2937384384d7ca41cf36fb61e8acaddef061ea057401ae18a15256b9a2948e93609c4040f4bcd892158fb5c56015641632673c83ae77870b51661e8390469cff2009d6bf546e24ed7ab7d2686424e2bcb6136f2efbb0f9eb20d69050141002cf01c4c6dac3e1513871cf3ffa2f65d7800df40b0272c425f7127fe27ef120ad0e4b854a01f2c127ed9638833ab2c64d901b8ff3ef62d2b52b79dcda901454e6e59fc72c49595651078c4fad1f304686a5351771158e5f22cb3d2a7de9e7a4ef066ddd7d8961bc4bc062a5f1d58839f935c67b8d216c71b8ec76a758e9cb985b8c15ea76ca6ee004ef55127871f279df198481e1c8f8072e9a851d7d2ffc9d2282b71511c3fd24d03f626755e40902d00b86d91ca2809a031b4be99a7f3a34850f86a57bdcc7fd9c4ad31e4dc3ec4f1840b1656d527399ea97c3b54deb56627768c6d6c316072b0b982a03b7b17267e39cfb46d79474a053d4a24d23565a6a1ba7ae1a8557ce8b6bb3156b124b2f4499ee81b2fa9740d55322f726dd61331a28d40a3ce5ca2648e941a4a8e6bc8fa87d0d0795e0caac0934ef6f5cb9293fe7866539628bda01dd70f05c60bc9628f1997b0c57f4c2d44d688fb1860262ee706cdfde7b305ff89428496cf418b6c8ec878c76bd0542ef0ea394722b1a5fd0986b741f8a3c94cbd2491cde353c4e97cf1756f7596b511d2d662aff0d593e484b9fee92fa5be8f4e8d32ac5117d6dd9b50ac97d0e1b68b04933556efebf739f303885f48a76579fe747a020450127395c9601041014758d8a9fd7358e7455d2daf676f7e3566cd548e0c0f46a594c4406bde2fc86fb9eb360c4495564d58dba4ee21cc4238a6c7c3ee2131badaf1bf2f8391c09981009596c941d156c14c4efade7fa8ac203ff44196778b2acec3d86a7306b4b46b09431ad544aa7b33c87032c979d16de553538c0f6afa731b51d4e22a44c889881778b0bb8a1d6fcb0c0a63bb09b4fc322b8a42575ea4ef17031c8b6006ac3e98db3142e9b4ab94f7309e775eac301b0bef81406ec49dd0555dd161e3887040379af67810db2e9b8d540a37eb4a71e23a2b4a76e34f27a9c1c8984cef0d506141fea4817a41055430b5512c8cb6896fa878d150c19960b50c437bd88760f0171bbd2c958c3be47793edcbf94e8abfb8aea73559269e4f9adf066dfa1f47b08e9ac5e7403d375ee718a55d9768975080e4ae8b393a036a0bb48de909a4a68f5d0d61b068f5a3dfca62cd9407807cfc17564e806e5a7673b53300103f7fe995ff82487993eb12b3e009832a00e1007320e5cb7cf4d358e4e5f74aeeef6c992d3fe72c9d58c95a8ecca980f7769ca42571de04002f6bede0cf947e015301a325e3a5a639e07586d012c62b34bf19a1a97b9a3a40c0d603ff3a00c02b25472e268f28b5b0148e65ba6862e95c49c8361f98fdd8b7ce8816a23964efe423cf9c10f12e687021ffde6787cfefb09e19ecf404664087e706111147df9c4319a4532159c4d768bc8a08bb125a0a4d018fc85993e0687b5027591e383c7c6abc6fbdff556ebf7a0cbcd68f242ec48b27f90877554c29137573ea8975bef640ad43006831376fb31f6e90f25603ed81ec9103ef36c2865f24e2f7a830ddd6635d6891befd5eaf272a6ccece5afb902dbfa7ee67cb66509c08a0fa595874cec495df10c8e3dad102883969ae313ed2eedc1039db66e5aff08c7afb1469be68b07b075c3ea771749bc9713d43a21be278dfd3aa5045229ae8cf5801b19fd69e96a8c5cd551584de541504807f320270f2f59f189c0be37b41bf7e88d9d5ba36cb868e90c0a8b076887358a5856e466f53a02c8399421cb9aac77fa4ce7f8aeb7b10a5c62a8ddf9882709bb2a608787e14a2c6d56f2c494517d78027d8116f2c6b308aff08902ed7e08c2c56f5ab8d46b45607e1a03981b9365e5be37f50edc6107b344969b853f1ab8eb7783eb92a0f22cd63cc7011aa08c074b8ce45ff997ec5084d821b0af4ef1cec5fc76f3b1ea8d0b1e727496ca594094dc8bc68ae61688b4c07577c02914e90da3ffee271fdd1652d2c2f91ac91660a3d8ba47462bf27dc9383a096e8c89517e52f5ac57737527030f8047395f6f2e3f640e4f277a22b22f8c969a9d28e9c2ed3e20be1ba23009e77a838ee3ae100d2286de966777df1605e8ecd57843880d40b1a0d558256b2ad682ab3019fadb0a6f46038741aec48c3554352673ee9559a204e50b694abbfab94b24e41c5c71f5958749beca6c8a3a35bd1ec6497e1fa5aa63c3a903afbcb763466a9980568e6a568a2cf905a9b716983f217d2cea1f1da353cc36b4f3f9d652a67284dd0f8dbd8b1a0c8c01e566e29c620852634e812c54a7d74e0a009e68055d0a616fc726f4043467effabb788653f6fe77db72b1fa0c52357e09672ed8f85557eadc92ba4c303c4c974a0673e7fa82d9461c81c458578cd7efa784f40136e9772d6596f28b9faddd78ba24d9bafd8c1b601d2451d1c50c40f3fed08cfebc9e6313510232aa4cfce3b635588e7967d88701bc90ce3880c921b1aa44a6bcd719769343d33280c4e062f7713ea072db5c4695b7313487a1731a4da8ffd652896ff94988ad9d225f22100ef8d33416770620764c5a31c355ed9f3cdef17bb9843746df8471322bad92e15104a71c65104c52751497cf159fe0d283dd7c9ee1296078b5aef874cb95ad90b42f63bbaae0af092b62d697a4b746346d1389c6a10f09b90b16f7affe94671558550cc75160a55d83744d353fc6d9a3b2a8df16bdf6d200f20fe70627dfca9a3a8ce5d8368c3cebe3601bad6337b7c02829fb08a0be3759ea50bd1dcb93e47137d93f6144861f0b27ccb498b1419c14c12a94b1d4c97ff0b22a7664e6be40c2cbda156941cf2216233c65eb304e4cdb0ad6127ee14c2ad191cad30162014b0077edacb26ff50112e52fcd24b0e3ca9cca6ae665a3825b938fe5265f73ebafc241c7dbb1f5df100a966262607a608fd03bb138dd1b810a9514245c57645a2473f6a4ae077192710ccf230c8e82dd4e7849767fd1e2f7cb8c7c6fef922e5ba378242291f8d4455e86fca4444216d08ab909fedb6e64f605831577e4cc2d3bf0f50ed9adc40c5e2dd00279369d4a526800190801b42a97db3edde9f2a79bb9e3c2a95c6ff5befd184f3ddc2ef4b97babf14f2e86cc2add0ec1c8f2fdc9388d4443c21d80dd9502c689bd28d1e962636b228b4877a7669180706aeef3b89cf5a97c1f7c932b15dbc7f7cc24ec707138f3cedc3308fe5197170ce2c5f6b22b7c9ad4251159fa79642570ee238f2b68fee92aa7fcd1adf9496c2e888c1248c45eb13346ff3491533fadcbb0b4370814702c93b12244da6e9432335b98a50cad77544615943fa244f4180c41a4e284e82d7be62e3b5b6aee8b19045092659d53734035e98826e2bd3f4e5133ada47743a175e1212408f472443e980faa3176a148f089b1ed22e1e56b167bdf7fb9b8120acb3dd40055574833a50d5473bb623aed43b914c01476d466ea405365b908478c9c779015fb511f2f75ddee2650fa8a671c6010a2da31acc9d63a249f8aa2707ec1a1575be421ec9ecbc1a0b4d8d08dc988c387880fc9181bef13e4b824237f76995c24fe935111e7ecb9f7b33b14503bc32e5bb20b3f8a9e830a7cfe6369e9d34cc2fe1019fab8a0ce0fd19b414acf4d701103e75e2634084493fb3d14d39a5073825ddbb1196ad3205ff627191db66532f87dd68b969980aa656fb183e55aea526f1c281320fe6fd5a9c724b64496233de3d3cafdbb6fefae0e341dc716711e000a90cfedda6518c2de366a0d1852e363b7b8fcd5fec3924ed50a620abbe721192c3aeaba4e72eff03aa02bc71e02468ec1e28207d6f9c940642060f23e4f89559d3f94a2076eaff366b04307d763eaf4c09a321edf967da66272327877cb0520265efc113f27a25cfbb2096bb7de7163c08af51fe0800a7ece4ad7522332e5d9a1db894c3a60f34acd0de75fcfed533932b884e4524e3a371a9626a7e4900c3d124cd27e261c99604bfd6ab79be73e170ed08eedaf0d7f2a8b38b384a3be3a6ffb697b9ec4c7b488bf82eee5b1c933dc830ee106c6f522cafc84d2979a56aa341f2b86c4ed2db09d9d3b5663af51f5be777076128c9513e0b3dd56501f437f5de5e0b568e6f4cc1e268a56668b65324146f9d561410a12d473827d6221888f8724e9fdc7349305c59a7daf7eb8233b673ec07a9d0f428aec41df82b0bf4b8e3cad0d3dfce66212dd90f685fe55a18fbf3f2556875f36bd01270454ba4b88d9cc15e4a3269113d515b60cb3a929b0bb9ed20381ddf6aa4e2e2c6b6bb18db299bf47c0d05c68143507c341f6399d00869efe71e00020a15b33ae32b6ef974c79cad958a3d60371b4081540f711325bac6c4dc527142aeff2c384eb780d381aa8df7e5ac4b0da4dd930cb300184027d470de7836934a6d0b6d87d67b7025528529ff171923218aed1ecc2afbfe6f7c629d89fc136b64f8ba0bb1a8b9eb05d829eb8bc878a70cb2d5313b25f1ea12f5cb39051dd4edb9cff49600953af29f0ebd8b49f22aafedc243a62caaaab8b1896bb7804fb658460c54d7b355bf184d9a285aa8356d39b8b7f1834b37685d746e279721067fae95cd6001101becdac7f63a19a500f1330fc78098b4791116d0d3eec918512baa1fa2362aa1028177f804ad9e7c9cccdd050d6aa78de483289c3d4415ba1c9d8a7462154993834442479166613de8313f77ec094b1e3e13a9e5372313a650b67736c7118268a57b96eec477bd2cb39d6563bdd4cee859e472febb98e796a736aa540e4bca77ba29234c6e846e8d970cfa3a5aa2b83e654c776efb86195488665e48042d5fc82f957a476f3f33c15624f5cd2d8ebfca875333aa78ba9ad993b75397e4a57de5c65d3c25f59ccaef9cd6c03a35187f8e2e84950e334b86bc3802971e3feff36e7ad4235e1c2cacaa38bc052b21162daa69bbfa0e6df60fd1af97950209f5fdc1209c6a51ac6306f52c5d0e1ee28e4269b58154911b1a4f8842570543b0f4c8d0db4f332e58cb6017b72e9ff350ff90d17cf96dfa2cbb208a84459cd12ebc2ec5850f8e1d54200ee58dfb6cf1968fef59fce3299c608c59539350a733e2bd1cbc6389b86172d4e572f0831f8973186de333df0d32f97d64de64d17cd0089fb6949f15fc4e28568c64a3acfd2c975ec8fe971ec2f454d87456ac980f044f0ddd9b69d445eb369733aedfc5c6966445afb3d7a1a99f0235040f14c766a4cc5ac70d810827b45406b18085dfc5f77478b130e6df9d63fa657a422630212e45a3a056099fa9e8945c4b9ed55c24220c5ebb1d6979439fc0b9b6a9bda420fde62dc7d56455c1d3385881d74a56a447d73b3022b20aae5f1de56823c91917de13788ed8a3a721624fa76441b3f244c8875621727b9401bc9a104cb0ce1074ab4827b2e69195470722866355f7bdfd53c3b107662ee384fd45eb4115653c913a51979f0a45d6ab1fd779315a45c65f6eb37b7195cd7a5a8b503cec369d9aa3c2c09dba6f64abd812df98fa01aa42d78a3ab02d9b18c8b239923e10a9012e215f42e0f24b42d966545ab5155c87eb0ffc0d9a2c1baf13ba7d0f4a3e846557fc8ea7e6ad552f6e8f6d17c061b8ad7a2b23799a4221f1f406e24c3c9c58b72f33d3433ef06c5a092b0ce868f3124f206a7bd0fee105a2810ea46fadb1d40434a5294f6b26ebb3e4c0b2dff47b0cceb2714e8ca5f74e2998ff398dd332158f9dee88ec5420f780ee2fa4fbe7d505fa89544df69207bd5c39b655aed5639d444a1084b77ac49b469ef21de947ba846cd43c96c175d11ca18ba3b4fe315713ed8dc00649c1722702983530604be16e73745b73c99401558c9968c63a260274b14b090f637b4b4de401a8b357b154a4643c8ef3c1516f3669d2a504ceff227e46471405466875b3aba7e5065aa1249ea46e1fb7ee313aee2f6c76c6e0b309a9ad2f1ef2b92a5690a568752d52f4bc2f0884e16fa615c9e0343da188eb7c9ec6892a4a34c32f2fe236ee422e38d9a04005b45cca320c3d878a1cfd7fe55cbf9faa5e25b989ae994bdae86c453ca35b9099cbcb096eff1ffe8c5c84c3e8e4038fd435573da853b27957504d543f3f53b8f4549563019e8506d71e522a0a762afc361bb89af196e9115c05224ab1fa7439f9686c1ce273972e15893eb2d69ff177288dd222c4884b3671625fdc0d7f09a16a91d597427ae32531b1f85216c96eaa878b526eeb576da5fcaefcb76e9e68b666f613906684eec7e1e5be42c4a36122b5d9e8d61a743700cbb0d9c88a31551a3c439bd7b74ecfa4962fa42af29cb789da35a9714e8e3b7fc5da8b4e40120d4e6f0d9dd26d2abf230a00f3c5693f2b5ac9ab46a10d60842e8c0c508021e67d490861b484e4f1cb48aae928d56c4982a26e27139eab24578061f1705735fab9478bba5b3354b6c9495f95657b8f7a28c0e8955972ef1b544e6d1bca9b83499cb1090059d0d8eb74a46e5d339a90dc980ae82727d8a2f10bdf10022a3b93fd897a1ca1978898d39c8b926baa92f763ce796e9e91bc88095e4b12d63c1da651acbf2a9adc5ec7bbd775ce719cec", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) [ 233.237399][ T20] usb 3-1: MIDIStreaming interface descriptor not found [ 233.245384][ T20] usb 3-1: USB disconnect, device number 43 [ 233.251141][ T6] usb 2-1: device descriptor read/64, error -71 [ 233.257312][ T60] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 233.517313][ T6] usb 2-1: new high-speed USB device number 41 using dummy_hcd executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x6acd) ppoll(&(0x7f0000000000)=[{r0, 0x1444}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 233.637395][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.648249][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.657787][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.666615][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.674939][ T60] usb 5-1: config 0 descriptor?? executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 233.710766][ T30] audit: type=1401 audit(1847638874.383:293): op=setxattr invalid_context="" [ 233.711083][ T6962] 9pnet: Insufficient options for proto=fd [ 233.740603][ T6967] 9pnet: Insufficient options for proto=fd executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa54d2ec76d67b773d86e1428aa01a11ce416b59a06a42e521f835c866b890581f6644c5367c8a43d05de13d77f1655c9a398df585bb4ca9c7acba15600afe7e02a8f9424e987ebd4fcae2f05d4ad3c3b3425975d1f119211790f3b9b6d1da1b887b237504d0338a90fceab8c4394017eb7608061963a5d965a478c2d559c5e7ce7f1c131d49a2aff6bfc04e2928fbc52a1ee7aa0c8cbfd18b6befb3140b1f0f9ca8c668cfa8b92f0c1511a352224ad85084defb8045ea0df4caed2e69b6661ef1efc0b1c28904361bf2cad6ebc6ca62c54c9a0192f53d2bd0e944d6027852a05c0e0b684a1da90d23b21da5cb053b6405b195566f5de35993cd058266c115f30feff34256d29babac67918db7bd4c38b200ac1ae856247375ea429d32e7dbd08dd8b511c28df383047a9ceeba4f05a7888382165541d37804892b08619937887092dc389ef322397c73e937c6c037a766e00189feba6c5bf4d318a3fa30c54272a060539a5b227736cca9bacc90f49468bd621999a11a7e809dfbdc847c389213088e43125e22de8de35765798f17e875e0a12f93a8cef16aba698eee1777dae204053108c083d003d5a12d51ad727b14346ac3991d40b105ad6617abfad112496ab4f8cc97c9bda7c96756e80d48ccc041e1ed343684412e7ad300cec0e26cebceb10e03e4b2bb2bc0f7bf3199435ab9e6e3d553210b21cce7242b51f78338693b66d63232b5580cd373ba33d1be3b672f5c3faa62709ba5dc9a0b152c020bb0635991076a69de7cff29daa84c6cad15bbc4558e2bf35f4e37bd087a90b9f3edf2a7486648b7628c634138eab155b4db38e7ceff2da542d2478265c5490fe2fc38cc78607a31a9e1d615a34314429484defa00bedc41436f6c950f725de914fbac82999523e5eadc62da72ceead8d2cca0fd13fe5f08ea8b47f8b770770e1a916e22f0c811661dbb4dabc7d8c2db2a1c3b79d62222e29a60f78f58fe2bc9faf637aa6f94cca8d1adf0652b50eb12bd895271ce5b72712f61208b3cafadf4174bdc54fe37d7e57a00efc8fc28ca850d8ad278bd9bc3b63d261b730ccb51a8df02804fb37d0c511837dd8b774d9ccfd4bd4737e61b1d3faa23fa01dc719aefb02b27e01ec8af988c8d6fb385d2df8fc8584b64ec86459539c8c0d52c53faecc9bc21240e73373816126bdd890eb6f4bea4824817a549a24a3092e6a7faffa564a4cf7b3ea19ad852aa64d439231181c1e2a953b4cf84eda7942473488a1fe4cf6d39f0bd8db15f45bd0c5b4f5f780472987ec3d8da699bea74086a3b0c05734965a8d89c072198845e747fbf77a71f74fa92f821aa346c5bf0d4f0a5f79d054dcb7c8f14314599196709b15be8f3c031b859514310ae4b286ea8cdeaa8897e25c51795842c7e50ff12b98605ccc79669f7ed0ce7a705c950356a7db7149fa467119004817d1e94ba13c849c5b93eccbd146c44e8d1bebd57c69ef437721faf193f713f047ee4dae7738a51eae9ba66b0f10c1515554df0c60661708246b44c7a96095a68d03900c1fac08006c59655a6afa0f677307e5905fe37962f8091ee5df90b587b495ba2ae1da34d1a78b93b0d93000e26a012367e2e4470ea65261d32243c3a5b1e386369a6befe1c94f7cdfa8a318f7ee88111ae7d7b14d5df186cf2643fc7292091cc284db64154ed61ba4e814d77d7caac646bcbe0da4508878a1cacc60b589bdcde4d31067734ba39318a2bc57d4df172880985fc1924b9d208bbdd3bf2e767f698288a491b9bd4815c4ac5c32b93e33469db470a70f67ddae227d81addd5f80e23849ee031567aefcac1a38b6627a360b9f4b1a22047f08339c3f5bedbd8b47a8f6a482bca452384dd386cb0409b76f0133c07ffc70097ded1b28c460b4ced3bc8f1b6cf5e984cccc2d74c0fc7f52b867727dc6ecc4c586e755727fe547483829690e28aaee4cc5066aba431f273988906c5a81f80bfb4676a6734741fd7d5389ec3ede2ca42c9f5ee767e8928c1a0b3712b2a7bea521681c0891bae3f02b5209823195b04228bd4d61074ad576d73c2dcfcbb345d3b5493c55e1efc8b1972a2fe0ed0a01afd578a486cc5007adadd89837271a54f02539f099ec31b820bff51b84615e04c799cbd44a03aa014cc5003e00d31f58527a147cac1f39e6032b57bb9c750c6cae89e9c4edcbad03b8809656914598e8628f4803d953e339f986c3c7920fe62fe093bb0b4f11c4602ec8600a2fe13151672cea1aaa25001346d1ac6ef26f58d0493c82e47c9a0992db252b68bfd5b34877338f033d36751904413bf408aef2533868a242b8ac46ce6263241d95c2ed7c121047c69a51de435705872717950f9096a791b175c734a897424c6ffa5255d6410f7166f8480d8f2f8faa0746bebab82afe96c28702a122570800e26975ab08a84b47a31d01ccc28a1c81671faa0084ed6f590a0595e2d222c2ba8212d53408a802474bd6da8005b991240f3293070c1e4f9209994d052996a8c10ff36c129b62c9109b0a8e001ca355e1d2b2ec3724973895b964b0f6b762adf19e685a72a0cd26f28b8fba3c528d764e7b39b1bd1c34162250a695bbb81910bf545ff1d1887b7dc436c912d0f2d69e21f292d482eb0eaf32aec6f667b9518a283a236316683816eab5520e47d6f26c0763b29de8c8a016303b2d75ece7833a5ccb4f22c106d2309c4e82148a0449ba0c2ab2188f91de5a5e1b4d5555e80ac616cae787917faa1484bcda4a27f9677afecb8b57484f6b1dcb9eebc9447cd1e7f71c751d9b8f7da1d5fc34f6f7e86a9f2179f0821099557d41a26d6020e40c02bcedc1a1921c7033e5ff7d4ce7e05f864c96c0e101d83547512eb3bf7d1c1fb4d846c1da51bc3d865baaab5420f554f8b24331991c64c420068192456386e3df83b1ae76221ad9e064fb9b4479a84e8cdde28b725c128635db8947efb1ea00560e75a24406ad316e06cc4cd84dec680e2c33c5be06991247520e4a63241db7e6dc32d5a22cd565132beece00dc6ad4a945b4af3fdfb4e211ebc8710f02006788b2a8a94b865b57e81a099f00bfe66e5701eedb3552b1aa9d3bdb505674b8dcb9c42c0be379e6beb874f8404d78acb9a735192a4067dabc3cf90156d3ecf32e92d3bea14eafbf72fa2108c550d248ce1dec0fcb7770c3e82ff49e988bb55a4b9eacc73cde0e32a99d33ebf44ba387f99329c482c13238c411e56bb6a1f58f329be646e926c752e7a6ae4976b14eacabc9cc2f058c928caac448d2ad4c76880d55db1bc8ec91b4a00bd313936f17ed937546936baefb0f7a22ea7a918e26ac7af91ee0c7cf7af414cd81b263d7e56b7b24653118a95024ecd37790094201e495390e2fafd849696222d25c9c5a8fc763a9b99f1f1cc6c41dfacc809fb4b83f18d647ae1f21e09cebe49d6b72bd619f76a603ec6a5657ba618a48c09f4ab8c9071dab61d0bcbdce2f6ed3f4fe31495b56febc67008ede7895f1674bfea806da26e1e1587c40a89fe196e25b0f9ebadf6f25f6865c9a174fd5b3254e8eb23865831ae93b229c7e5304746e86a322900f1457c96eefcc7fdc9d07a871415a23be4e005e114c1440ec4d48cecfa5deab5cfa216771ae31663260a3458a02bb2e108492e6313ca10c003e80b08dd99534e1272edfcbadd975f721f1be3073b44323e040630834fdcb6b33502257c7796e7622c79fdfd1c997a04b65fc3571e0f3f520537b271b7a558dab487e22f42a4756ed477c4fb8bc4d1d9968b47491ffd173a6e76b58053127a0a482f667d5196cf6cbf6b8d3207b4466c2b77de55b349761e5852ba6306103992868469598ed3720d73351611fd755d005716d1e68124f0142233182092d64439bb1e0354cdb12eb736ca680885bf59ab1cd6f636a119f226811de9fc1d2f56f37ffbcc44f3ea8a6bc94f9b460754e28e0305fceed27db6cb8e873c55259b33e95020ff8cec9f6ed5573198861a3ff0d29465a15a392d1c9ffcde018b04df0e93c81bc1aeae503ec2e6092a1b8bd74e430332f49098eff808fc3e61ca9bc1c2f8455eda28c273c3cb71a04e5d977368f7d28bbd909bcf89112190e88f6a91c8f56e9bf62e6b08d9fceec7280a3adf70041e42b2b6f6ab254bcc863352c5a70fd196c8c47d3a9dd74e8ed8ac706f04091d39efd87f5fbc5d7ffdad770929b7f69344479d1cd30a012964ac6445f8095f07ca0084fe79ad1cc59e552f1496940b7f2d7ce0978e7e9b2bb0bc2409edfe1724e58428fe9f51a3bb1cb1ab5b278f8d17f5f38e220cba105c87c0e38f6299d66f980b04c1f0807afb467f6ca712e336d87b4354df02683326b654f745420c249300c4e0ea0d5942dcf36cb95c90a43e0a40b9159a46e7230ffe6543cb2c78dc69c61c03acd234a96f707abc53e37007968aeb9c27ba98e13d84922d5d92988a9373cd72f0cafe57a3d153b510a2a6373d84be861b7a509e2c2798aacba6ceb7d32ac73c22e04d11222a52dbf21afbe35910261f4b0a45bd9738c94111ea24192eed7ad0ffc16cdcdb55be5bfc4d26b83f1f5f6b4f16461e89f8fbab93a3a4bbacf2089ebc2b135c0661171d1beb51e3148eac2fc7a3ef1bf13d6251bad9676da10b75c6ff94a6b80aa1663c781c68095f534c027a946fbe6226a9e3b20f6efcb98ed348416b82d968af4123eaa09b2b5cf401659394628ded305c916a1c6fe48def4d29d604f37c5659cf758a1b8746e0b10318ad9b3b1179a75c753e1ce94f5be037efb7b4380ea52ce86260fb836c5c659261f7975c9f72bf0cc0c3a8c5ff0b9b86da6fa470646fc5c1e752f8c582dab3725a5f9039d3aed56ad9d0509278cca22618c04896f09b0b2924aeabb56180eeeb76ea721f10f82c556e66ca693fe68b04b7b83b024dbad69993dcd3ad1d5f8dc8a2937384384d7ca41cf36fb61e8acaddef061ea057401ae18a15256b9a2948e93609c4040f4bcd892158fb5c56015641632673c83ae77870b51661e8390469cff2009d6bf546e24ed7ab7d2686424e2bcb6136f2efbb0f9eb20d69050141002cf01c4c6dac3e1513871cf3ffa2f65d7800df40b0272c425f7127fe27ef120ad0e4b854a01f2c127ed9638833ab2c64d901b8ff3ef62d2b52b79dcda901454e6e59fc72c49595651078c4fad1f304686a5351771158e5f22cb3d2a7de9e7a4ef066ddd7d8961bc4bc062a5f1d58839f935c67b8d216c71b8ec76a758e9cb985b8c15ea76ca6ee004ef55127871f279df198481e1c8f8072e9a851d7d2ffc9d2282b71511c3fd24d03f626755e40902d00b86d91ca2809a031b4be99a7f3a34850f86a57bdcc7fd9c4ad31e4dc3ec4f1840b1656d527399ea97c3b54deb56627768c6d6c316072b0b982a03b7b17267e39cfb46d79474a053d4a24d23565a6a1ba7ae1a8557ce8b6bb3156b124b2f4499ee81b2fa9740d55322f726dd61331a28d40a3ce5ca2648e941a4a8e6bc8fa87d0d0795e0caac0934ef6f5cb9293fe7866539628bda01dd70f05c60bc9628f1997b0c57f4c2d44d688fb1860262ee706cdfde7b305ff89428496cf418b6c8ec878c76bd0542ef0ea394722b1a5fd0986b741f8a3c94cbd2491cde353c4e97cf1756f7596b511d2d662aff0d593e484b9fee92fa5be8f4e8d32ac5117d6dd9b50ac97d0e1b68b04933556efebf739f303885f48a76579fe747a020450127395c9601041014758d8a9fd7358e7455d2daf676f7e3566cd548e0c0f46a594c4406bde2fc86fb9eb360c4495564d58dba4ee21cc4238a6c7c3ee2131badaf1bf2f8391c09981009596c941d156c14c4efade7fa8ac203ff44196778b2acec3d86a7306b4b46b09431ad544aa7b33c87032c979d16de553538c0f6afa731b51d4e22a44c889881778b0bb8a1d6fcb0c0a63bb09b4fc322b8a42575ea4ef17031c8b6006ac3e98db3142e9b4ab94f7309e775eac301b0bef81406ec49dd0555dd161e3887040379af67810db2e9b8d540a37eb4a71e23a2b4a76e34f27a9c1c8984cef0d506141fea4817a41055430b5512c8cb6896fa878d150c19960b50c437bd88760f0171bbd2c958c3be47793edcbf94e8abfb8aea73559269e4f9adf066dfa1f47b08e9ac5e7403d375ee718a55d9768975080e4ae8b393a036a0bb48de909a4a68f5d0d61b068f5a3dfca62cd9407807cfc17564e806e5a7673b53300103f7fe995ff82487993eb12b3e009832a00e1007320e5cb7cf4d358e4e5f74aeeef6c992d3fe72c9d58c95a8ecca980f7769ca42571de04002f6bede0cf947e015301a325e3a5a639e07586d012c62b34bf19a1a97b9a3a40c0d603ff3a00c02b25472e268f28b5b0148e65ba6862e95c49c8361f98fdd8b7ce8816a23964efe423cf9c10f12e687021ffde6787cfefb09e19ecf404664087e706111147df9c4319a4532159c4d768bc8a08bb125a0a4d018fc85993e0687b5027591e383c7c6abc6fbdff556ebf7a0cbcd68f242ec48b27f90877554c29137573ea8975bef640ad43006831376fb31f6e90f25603ed81ec9103ef36c2865f24e2f7a830ddd6635d6891befd5eaf272a6ccece5afb902dbfa7ee67cb66509c08a0fa595874cec495df10c8e3dad102883969ae313ed2eedc1039db66e5aff08c7afb1469be68b07b075c3ea771749bc9713d43a21be278dfd3aa5045229ae8cf5801b19fd69e96a8c5cd551584de541504807f320270f2f59f189c0be37b41bf7e88d9d5ba36cb868e90c0a8b076887358a5856e466f53a02c8399421cb9aac77fa4ce7f8aeb7b10a5c62a8ddf9882709bb2a608787e14a2c6d56f2c494517d78027d8116f2c6b308aff08902ed7e08c2c56f5ab8d46b45607e1a03981b9365e5be37f50edc6107b344969b853f1ab8eb7783eb92a0f22cd63cc7011aa08c074b8ce45ff997ec5084d821b0af4ef1cec5fc76f3b1ea8d0b1e727496ca594094dc8bc68ae61688b4c07577c02914e90da3ffee271fdd1652d2c2f91ac91660a3d8ba47462bf27dc9383a096e8c89517e52f5ac57737527030f8047395f6f2e3f640e4f277a22b22f8c969a9d28e9c2ed3e20be1ba23009e77a838ee3ae100d2286de966777df1605e8ecd57843880d40b1a0d558256b2ad682ab3019fadb0a6f46038741aec48c3554352673ee9559a204e50b694abbfab94b24e41c5c71f5958749beca6c8a3a35bd1ec6497e1fa5aa63c3a903afbcb763466a9980568e6a568a2cf905a9b716983f217d2cea1f1da353cc36b4f3f9d652a67284dd0f8dbd8b1a0c8c01e566e29c620852634e812c54a7d74e0a009e68055d0a616fc726f4043467effabb788653f6fe77db72b1fa0c52357e09672ed8f85557eadc92ba4c303c4c974a0673e7fa82d9461c81c458578cd7efa784f40136e9772d6596f28b9faddd78ba24d9bafd8c1b601d2451d1c50c40f3fed08cfebc9e6313510232aa4cfce3b635588e7967d88701bc90ce3880c921b1aa44a6bcd719769343d33280c4e062f7713ea072db5c4695b7313487a1731a4da8ffd652896ff94988ad9d225f22100ef8d33416770620764c5a31c355ed9f3cdef17bb9843746df8471322bad92e15104a71c65104c52751497cf159fe0d283dd7c9ee1296078b5aef874cb95ad90b42f63bbaae0af092b62d697a4b746346d1389c6a10f09b90b16f7affe94671558550cc75160a55d83744d353fc6d9a3b2a8df16bdf6d200f20fe70627dfca9a3a8ce5d8368c3cebe3601bad6337b7c02829fb08a0be3759ea50bd1dcb93e47137d93f6144861f0b27ccb498b1419c14c12a94b1d4c97ff0b22a7664e6be40c2cbda156941cf2216233c65eb304e4cdb0ad6127ee14c2ad191cad30162014b0077edacb26ff50112e52fcd24b0e3ca9cca6ae665a3825b938fe5265f73ebafc241c7dbb1f5df100a966262607a608fd03bb138dd1b810a9514245c57645a2473f6a4ae077192710ccf230c8e82dd4e7849767fd1e2f7cb8c7c6fef922e5ba378242291f8d4455e86fca4444216d08ab909fedb6e64f605831577e4cc2d3bf0f50ed9adc40c5e2dd00279369d4a526800190801b42a97db3edde9f2a79bb9e3c2a95c6ff5befd184f3ddc2ef4b97babf14f2e86cc2add0ec1c8f2fdc9388d4443c21d80dd9502c689bd28d1e962636b228b4877a7669180706aeef3b89cf5a97c1f7c932b15dbc7f7cc24ec707138f3cedc3308fe5197170ce2c5f6b22b7c9ad4251159fa79642570ee238f2b68fee92aa7fcd1adf9496c2e888c1248c45eb13346ff3491533fadcbb0b4370814702c93b12244da6e9432335b98a50cad77544615943fa244f4180c41a4e284e82d7be62e3b5b6aee8b19045092659d53734035e98826e2bd3f4e5133ada47743a175e1212408f472443e980faa3176a148f089b1ed22e1e56b167bdf7fb9b8120acb3dd40055574833a50d5473bb623aed43b914c01476d466ea405365b908478c9c779015fb511f2f75ddee2650fa8a671c6010a2da31acc9d63a249f8aa2707ec1a1575be421ec9ecbc1a0b4d8d08dc988c387880fc9181bef13e4b824237f76995c24fe935111e7ecb9f7b33b14503bc32e5bb20b3f8a9e830a7cfe6369e9d34cc2fe1019fab8a0ce0fd19b414acf4d701103e75e2634084493fb3d14d39a5073825ddbb1196ad3205ff627191db66532f87dd68b969980aa656fb183e55aea526f1c281320fe6fd5a9c724b64496233de3d3cafdbb6fefae0e341dc716711e000a90cfedda6518c2de366a0d1852e363b7b8fcd5fec3924ed50a620abbe721192c3aeaba4e72eff03aa02bc71e02468ec1e28207d6f9c940642060f23e4f89559d3f94a2076eaff366b04307d763eaf4c09a321edf967da66272327877cb0520265efc113f27a25cfbb2096bb7de7163c08af51fe0800a7ece4ad7522332e5d9a1db894c3a60f34acd0de75fcfed533932b884e4524e3a371a9626a7e4900c3d124cd27e261c99604bfd6ab79be73e170ed08eedaf0d7f2a8b38b384a3be3a6ffb697b9ec4c7b488bf82eee5b1c933dc830ee106c6f522cafc84d2979a56aa341f2b86c4ed2db09d9d3b5663af51f5be777076128c9513e0b3dd56501f437f5de5e0b568e6f4cc1e268a56668b65324146f9d561410a12d473827d6221888f8724e9fdc7349305c59a7daf7eb8233b673ec07a9d0f428aec41df82b0bf4b8e3cad0d3dfce66212dd90f685fe55a18fbf3f2556875f36bd01270454ba4b88d9cc15e4a3269113d515b60cb3a929b0bb9ed20381ddf6aa4e2e2c6b6bb18db299bf47c0d05c68143507c341f6399d00869efe71e00020a15b33ae32b6ef974c79cad958a3d60371b4081540f711325bac6c4dc527142aeff2c384eb780d381aa8df7e5ac4b0da4dd930cb300184027d470de7836934a6d0b6d87d67b7025528529ff171923218aed1ecc2afbfe6f7c629d89fc136b64f8ba0bb1a8b9eb05d829eb8bc878a70cb2d5313b25f1ea12f5cb39051dd4edb9cff49600953af29f0ebd8b49f22aafedc243a62caaaab8b1896bb7804fb658460c54d7b355bf184d9a285aa8356d39b8b7f1834b37685d746e279721067fae95cd6001101becdac7f63a19a500f1330fc78098b4791116d0d3eec918512baa1fa2362aa1028177f804ad9e7c9cccdd050d6aa78de483289c3d4415ba1c9d8a7462154993834442479166613de8313f77ec094b1e3e13a9e5372313a650b67736c7118268a57b96eec477bd2cb39d6563bdd4cee859e472febb98e796a736aa540e4bca77ba29234c6e846e8d970cfa3a5aa2b83e654c776efb86195488665e48042d5fc82f957a476f3f33c15624f5cd2d8ebfca875333aa78ba9ad993b75397e4a57de5c65d3c25f59ccaef9cd6c03a35187f8e2e84950e334b86bc3802971e3feff36e7ad4235e1c2cacaa38bc052b21162daa69bbfa0e6df60fd1af97950209f5fdc1209c6a51ac6306f52c5d0e1ee28e4269b58154911b1a4f8842570543b0f4c8d0db4f332e58cb6017b72e9ff350ff90d17cf96dfa2cbb208a84459cd12ebc2ec5850f8e1d54200ee58dfb6cf1968fef59fce3299c608c59539350a733e2bd1cbc6389b86172d4e572f0831f8973186de333df0d32f97d64de64d17cd0089fb6949f15fc4e28568c64a3acfd2c975ec8fe971ec2f454d87456ac980f044f0ddd9b69d445eb369733aedfc5c6966445afb3d7a1a99f0235040f14c766a4cc5ac70d810827b45406b18085dfc5f77478b130e6df9d63fa657a422630212e45a3a056099fa9e8945c4b9ed55c24220c5ebb1d6979439fc0b9b6a9bda420fde62dc7d56455c1d3385881d74a56a447d73b3022b20aae5f1de56823c91917de13788ed8a3a721624fa76441b3f244c8875621727b9401bc9a104cb0ce1074ab4827b2e69195470722866355f7bdfd53c3b107662ee384fd45eb4115653c913a51979f0a45d6ab1fd779315a45c65f6eb37b7195cd7a5a8b503cec369d9aa3c2c09dba6f64abd812df98fa01aa42d78a3ab02d9b18c8b239923e10a9012e215f42e0f24b42d966545ab5155c87eb0ffc0d9a2c1baf13ba7d0f4a3e846557fc8ea7e6ad552f6e8f6d17c061b8ad7a2b23799a4221f1f406e24c3c9c58b72f33d3433ef06c5a092b0ce868f3124f206a7bd0fee105a2810ea46fadb1d40434a5294f6b26ebb3e4c0b2dff47b0cceb2714e8ca5f74e2998ff398dd332158f9dee88ec5420f780ee2fa4fbe7d505fa89544df69207bd5c39b655aed5639d444a1084b77ac49b469ef21de947ba846cd43c96c175d11ca18ba3b4fe315713ed8dc00649c1722702983530604be16e73745b73c99401558c9968c63a260274b14b090f637b4b4de401a8b357b154a4643c8ef3c1516f3669d2a504ceff227e46471405466875b3aba7e5065aa1249ea46e1fb7ee313aee2f6c76c6e0b309a9ad2f1ef2b92a5690a568752d52f4bc2f0884e16fa615c9e0343da188eb7c9ec6892a4a34c32f2fe236ee422e38d9a04005b45cca320c3d878a1cfd7fe55cbf9faa5e25b989ae994bdae86c453ca35b9099cbcb096eff1ffe8c5c84c3e8e4038fd435573da853b27957504d543f3f53b8f4549563019e8506d71e522a0a762afc361bb89af196e9115c05224ab1fa7439f9686c1ce273972e15893eb2d69ff177288dd222c4884b3671625fdc0d7f09a16a91d597427ae32531b1f85216c96eaa878b526eeb576da5fcaefcb76e9e68b666f613906684eec7e1e5be42c4a36122b5d9e8d61a743700cbb0d9c88a31551a3c439bd7b74ecfa4962fa42af29cb789da35a9714e8e3b7fc5da8b4e40120d4e6f0d9dd26d2abf230a00f3c5693f2b5ac9ab46a10d60842e8c0c508021e67d490861b484e4f1cb48aae928d56c4982a26e27139eab24578061f1705735fab9478bba5b3354b6c9495f95657b8f7a28c0e8955972ef1b544e6d1bca9b83499cb1090059d0d8eb74a46e5d339a90dc980ae82727d8a2f10bdf10022a3b93fd897a1ca1978898d39c8b926baa92f763ce796e9e91bc88095e4b12d63c1da651acbf2a9adc5ec7bbd775ce719cec", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x69, 0xb8, 0xc7, 0x40, 0x19d2, 0x6d9a, 0xf822, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 233.769178][ T6971] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.787415][ T6] usb 2-1: device descriptor read/64, error -71 [ 234.087320][ T20] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 234.177303][ T6] usb 2-1: device descriptor read/64, error -71 [ 234.297375][ T6] usb usb2-port1: attempt power cycle [ 234.607458][ T20] usb 4-1: New USB device found, idVendor=19d2, idProduct=6d9a, bcdDevice=f8.22 [ 234.616432][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.624267][ T20] usb 4-1: Product: syz [ 234.628334][ T20] usb 4-1: Manufacturer: syz [ 234.632771][ T20] usb 4-1: SerialNumber: syz [ 234.637738][ T20] usb 4-1: config 0 descriptor?? [ 234.677593][ T20] usb 4-1: bad CDC descriptors [ 234.707323][ T6] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 234.878102][ T20] usb 4-1: USB disconnect, device number 40 [ 234.887534][ T6] usb 2-1: device descriptor read/8, error -71 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000000), 0x8) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 235.167382][ T6] usb 2-1: device descriptor read/8, error -71 [ 235.202057][ T6985] 9pnet: Insufficient options for proto=fd [ 235.207700][ T30] audit: type=1401 audit(1847638875.873:294): op=setxattr invalid_context="" executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[], 0x0, 0x1082c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x6acd) ppoll(&(0x7f0000000000)=[{r0, 0x1444}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x84900, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 235.220073][ T6989] 9pnet: Insufficient options for proto=fd [ 235.249397][ T6991] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') [ 235.300198][ T30] audit: type=1401 audit(1847638875.973:295): op=setxattr invalid_context="" [ 235.318242][ T7005] 9pnet: Insufficient options for proto=fd [ 235.667306][ T6] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 235.757478][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 236.117398][ T6] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 236.126239][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.134074][ T6] usb 2-1: Product: syz [ 236.138073][ T6] usb 2-1: Manufacturer: syz [ 236.142463][ T6] usb 2-1: SerialNumber: syz [ 236.147336][ T6] usb 2-1: config 0 descriptor?? [ 236.667411][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 236.675492][ T6] usb 2-1: USB disconnect, device number 43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "97a796"}, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, 0x0, &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003ce000000ce03"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 239.857368][ T60] uclogic 0003:256C:006D.0064: failed retrieving string descriptor #100: -110 [ 239.866125][ T60] uclogic 0003:256C:006D.0064: failed retrieving pen parameters: -110 [ 239.874142][ T60] uclogic 0003:256C:006D.0064: failed probing pen v1 parameters: -110 [ 239.882236][ T60] uclogic 0003:256C:006D.0064: failed probing parameters: -110 [ 239.889609][ T60] uclogic: probe of 0003:256C:006D.0064 failed with error -110 [ 239.899946][ T60] usb 5-1: USB disconnect, device number 41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x6acd) ppoll(&(0x7f0000000000)=[{r0, 0x1444}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x2, "97a7"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00300e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 239.931783][ T30] audit: type=1401 audit(1847638880.603:296): op=setxattr invalid_context="" executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/19) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r3, 0x407, 0x8900003) write$eventfd(r3, &(0x7f0000000000), 0x8) [ 240.017357][ T30] audit: type=1401 audit(1847638880.683:297): op=setxattr invalid_context="" executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', 0x0) executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) [ 240.187304][ T2572] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 240.187304][ T358] usb 1-1: new high-speed USB device number 45 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r3, 0x407, 0x8900003) write$eventfd(r3, &(0x7f0000000000), 0x8) [ 240.277549][ T30] audit: type=1401 audit(1847638880.953:298): op=setxattr invalid_context="" [ 240.295716][ T7053] bpf_get_probe_write_proto: 10 callbacks suppressed [ 240.295736][ T7053] syz-executor.3[7053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') [ 240.302647][ T7053] syz-executor.3[7053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.367297][ T60] usb 5-1: new high-speed USB device number 42 using dummy_hcd executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) [ 240.447351][ T2572] usb 3-1: Using ep0 maxpacket: 16 [ 240.457346][ T358] usb 1-1: Using ep0 maxpacket: 16 [ 240.474657][ T30] audit: type=1401 audit(1847638881.143:299): op=setxattr invalid_context="" executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r2, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/19) [ 240.492260][ T7068] syz-executor.1[7068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.492332][ T7068] syz-executor.1[7068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.587341][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.617285][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.626939][ T358] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 240.647367][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.647380][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 240.657474][ T358] usb 1-1: config 0 descriptor?? [ 240.667302][ T326] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 240.747360][ T2572] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 240.756231][ T2572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.764133][ T2572] usb 3-1: Product: syz [ 240.768049][ T2572] usb 3-1: Manufacturer: syz [ 240.772456][ T2572] usb 3-1: SerialNumber: syz [ 240.777638][ T2572] usb 3-1: config 0 descriptor?? executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) lstat(&(0x7f0000000040)='./file0\x00', 0x0) executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="2538ffe2177ed9953a94e72d6f1122bfa202290214ef1ed0b586bca92b5071d9482b5d1f0919537b03645a8aba74bae6f7f9d3eb4c1b608b6e73b895a4e4b5b312650ba463b3815954fabdb6f98e0f3e67797c71d4da3dd44571e75ab21f0b05e24dfe2198577345f0e2c24afe261f8098655f279a89d023310faac811dc9a7c972cae275a4dc7d1a0e95fd8b690a5397eb6a5c38942b8c883b96feb07deef9500502b1671b18f9cdf96926b903c1f31216dd379473d42483a71f18253763ad48b4519b088b1ddd79ee5936d64ccf78680decd1937c51c1b01651a5128452d29152d76e1e84be42341fbf0bafb3bdd83476c12364fe4c4d79b9e37128f0950adcceacba16faa30a64a6bc1323e7f2a02d15aa4e1d44ab680bb1fe8e6881bef5427be38936efabb574ca9c5916dfc9d186d1ea3becac692066a6bac644f73a542ad5e81d7f321e8d02b54e1b208a2a0f18b81e2575eea09285198917f77b1ed1af1d32409a3765faa14141c2f6a929a64e9238c016a9485ede93daca6c9abed13158f761190c989e65f3f8d96f73211e9f650fe35d4ccd62ca18db24f75a3912b6a2a14fffeb4fa93f318465bc48c7a9b967f41f50b3a06298b1b7e43f1834b7072f42b629129a1a28f3d2f7964cef34a0ee916a82eb4bc3ffadb7600d2adb05ea315f52f725b962ed8f1f1f8addaf62f19edc40b9b51bcb457c2e70c395ac3ef2d0ed56d9d8317d5ab9dbc3dbaa242ee705bfbef1694005e7468e1c79f009ccdd7901a036477cbdc4e445f4e047bd0bf234030960c7de5fe1424b93953cb382ce959d9957bb56cdd93d0ae376702b4480292936ebbe7ee92f7a8f27f4912e1c5298a64fad6378044bd39c600909a708f1d1bd639f9c2461430d0be4880dc6be38f4643951bbe0f895244c7661b8491e40de97ac22cf055f85a17d4317aade5244e02f561e955252b275e43abde85e1f9a5e79be9da3b883f04da73f97bd0915de894a0d94c7e7ff70c4d657c6a1003e3d5d11bc5eb614dd2b139064156fe4b8a76bc1171f6f5855c2959b42c9178e62f1449d97e722a231ae747dcf9d79d70f67f440436bd2aed9b4ae92e7848588be55d00881caae0cc51469c1f10b3f476ce338a0b84a1f36b9f4307d6469396871caca4aa52c88193cc416896879331a4e6ec9a2119e1f0a127f905deb575314f7f99fb8f29793f8d087ccbe23d40b7b08032cd340218eb8d39feb9da31ff7314b21fce6b38458db83c63a5204f1c7fee984d55af4533b41992bef5612b451ef4d90233040e5cadc479f4fea817d9c0c73f438ec06de414c0804d3bcaddd31a9f70a63159534cf27e77c3b8ddbb5ccb9fd3cdcaf03f5f39e69d54210ade8b16347b8075960b6dd26c6834b8f42f28582419724be3ac8e7448ac113fd0fe7367e841db75f2e53dcc2126eadba92ad022a351592848d7326dbd16322da3a18652380676c0390f70c35479b7c82d1ffb94c9fdd9886219464c835b8f761684dfa63f85b74a333a385d33657bb908a8f444f42a32a2d41cad5faf6bbe336144618a60bdd4b1a5bd6a9da4f8e9e111180f39207c8e6f682dac911539a539089de083a521db2ebd4a96194902a1df8079329c41ec433ad1d0b011690781c2f324caec3f11d87eebbbc219b32eb7782fb5f77d4ade32dbc87fc3c88b584aa3360f1a8d09c9d2d6fc7c55d3a7b82840bb13efb5dfc9fb0a2b308bcd363bb18ab96e55cd5bbdefa303e901a54e166e136a8abaf7fac3c1c30ab1c97d5bbeacfc1e10b4ba3d3102ed0e109ce36da2c4e6704aac598c3744d0d6db3b63f749852e8788afb21c4938f4112313bbadc2f1a6271e7118af219b179a868eefbb60c71c45982fff779fcff54d4d7b941e349596b76c832a31b541c8bc292fbeba5cbf30e69920db7309730b204747d07996b39a2d38e1d281df02d8e762e85838efe2185959719b1e7e7c168c130e78e35bd5c549bb925651d9abe7b25e3e02b88d0977261410b9b9ee90ee8c9a5144ddab6f184987556ed22cacfa97ccab6440ad34962da5e646fde4d9c20441bf50d008232ce077c7ca0e3b9706d91567e30da5710371bb870468ff97674270bd44099ae1d1d9d5ee4366a9129ee8379e1b380c0cd03eafa9afd0fcf7c6d1665f8df750bd5513f8d17bf980bfc35af3245d63bade8ec344654bca32689d2423ceb9dbbb0163eae3544f86e9132933705df95801e3fb84b234a5932f9631220759fb57ef19bb4c6ef05418eaeab2a1dcc2c340307465942bd46c6c0c2b34aef9f651e5a538695ab7bcc42ccc31bce353b404e7acc4563cb38a1ad8f7a03ce858263cd1efb80f3754ee3b98f806df30d35f91d473d2ec4a2861d1db0824de21eabc7167344712201a5905e3eb90650b39f901af9cded15cab12b62ca7de51b70269505c2a8e45af3dde07c28b5342efb1d3d48976412bcac1fa6cecea695451702fb1e5ae85f27da357c9f0ab396837f381264b8b5dd5f5a3c12d553f27fd5aab50514aef843b85362df38d02d8bf45952feae541f3f3652e86da44cb57bc3fb0c7cc168cfa99a2b3f94515c63c94ceaff005f48c45bad140b1af0d758d17133516ab10c7154d863eaa2f6954f3a0e3eb85b4b904ec37cc00282e851bd7f9c23dbf2f650516e4b0408561a3b0dd020fe95dee9a6ad4bff10a69d80e65c143dff60f61c6d852eb74adcb3a3b730e3ac27647e19d980cfea7675365da68ed542dab677ec56a098959cd5392871dd1e00851a877ce26642eab40f5cd0e56f7b1ac520a729863360b0a3e7d93962f7fc6b39f5aa2403e42e89f21d9fd853fa2df56fd2ab6305f3b8be75c174b4697d21bb38f72e83fef26ab068d5c10b7819ac50389375fd2bba3a65c4b12945a0139bfca050f90ff7e86b2e06c7c2bd867c5dc0105e6fff2086ed46a2cf89516dbd231d2a793d471888f6c5529b76144ac2d7f058bf4fa9fd55d1f8fbf8418581f14754eb1504eb81c9754fd2fee7a2b611bc50742787c05775900309e7b22ae45de32ede79b23ea4394da29158c4f930c4e0125dea338a99ccdbea3455aefc1218ff5b43cf06863a9d3d79ea9535f69d1a530421c729fd1b654586c98bb6c50c51a8e30ef6fa8ae39cf9eb42e39bf9fb2517fdafea38d1c078fbfe56705229a4013da056156f11f5cb972bf9558568a366b681ed9dc2c92f84d7a3c8d5c72f58c1ed2b3b58eff2a024c85b4482df3546a76f4066f01d91c860146c660923ffc48e7a5fffc8be7fbb08c00526e023f3c3853f1c134566bba8ec335f0bf743fb62ba9b48ed5da7076343438956599e47f803023a101597982f67a0c0facf2a80d7e15657287b23f85fcaa53c351edd957801d6e219e039a3e3d581c8a2a237b7d0320605b362c5ebef86bbe2eb679bfee06021ee3b4b3b1b0e4dd368d235aa115d0a01cb115e398c4ef569ffe55f567654e39a22acae8002f78f75a1648d9bdb45d71881cc7d02ba3bdee215895c6418728bfddccf01fd5adc51e80df398fdd6f7cb4616937ec3df8f0c781ca4e4014885b83f2d114c21dca72482e208bcf93ca98712ede65bb79c49ff6f5e190f336dae2e04b7e1a335469338ba55307dbb411254b7e45afe6cf0081b4ac87bb2da196f3f993f8096f234a32bc963ed002996ebbff07911cd796aafd766257cabcfa7e590b00b1b98b0ad0b1bf1b95adb0df7c519be3b314ea9868a9a2819a6cbdaa29a84418efaae784fa28a3079fd6e648db903fe874302f0319c4f039890655fbe242e0226642361f672dcdd6eb274b8f9bc037d4c57688253a4051326045859f4d434fa6a8a510836e220fe65f826d4e8779c487537b18a11dc6ccf48904c3041ecf2278cb9444d6a3fdbe1ebfd4b77586665bacc467130919419f48956b8923eabe7ed93f0d7096d9c5af6ac7253e01351751372fc17d26c79d49e6d874ea396470c9b34a51048c3019f7628d9dfd43fcf470103bedc2e28e38d240d38dc67a6762a5257ce83c03d6904099148ddec7e1a9cdfef54efb8e7f03a57c2c97278cd0da231de06d48698ef777b3efb33cb2869d2bbeb540b8b60c1d367364c2a1044af245a252b4ee061f69ef68e12dacb9f2104e43147a91e3358728f676a21522802e81001ccb9cea91dcfae0f8fd450c278cf76ef740b2ac539b66623b840ccb0fcbe4d9d61fef0b1bb44d60df53ed931d63a8c22d5ae595801976d2384d5cc4cea4e8e526571657de75e3571ead7f40083f307daff8f303cf0ebcecd53893a67b89843e607819c4eef6782d6cf00c9ff38ada30ef23a534853065adc0bc8da3506fb97c0118c2ac9fbef85f2fb1319f96d6f9e57b1b7ca84a1e3a50f854de846cbbd23c005ac270a7adb8b17a636a36f71bc40f5d692634f49d110be854a16622649c9e13b76cc500c732c607fb2af125410802839ce70d0885ed5944e3ea169466e9a9d9e99421e998c28a7a3f77b22a96718b513984ee87d31677230fce43adeba4464d839ddb15f21e67c7783b84de8035131df36146e7073f51abb5f8c465338ca927834a835d13b7fb10eb64881cabae97edc0b757b5bd36e7cd9dfd173b627c976d14dfe0bd242115a81f9537550e8c5d16565a2f1bceae6d5d74a86283e86196c0e5185a309ce4a71421c82e66b35e4ab5e99d53043f29d873f18f5ae2433182d5ffa713579516c4302d0b141d15f60df71ab9e0736cb38163f2b6506eb94fc47ac0f120a6083df924b0c965ebc76796a41463dbb246f64e1c048654f476f5041ccdff00faa408d8302656d77d749ccc6090de33634aae0a3af2348f61eff552538828172600e87bf64126e60b057624979ccb2359bbd9961741bade15cfbcee738d3d5a7ec86d2a0402d6afec7aea999548121cdfbb6e4afeee050b5e029d1680655df03e5fbb2f05e7677e6191f242e9df3957a094861bbeb1f0ae7b624d004cdbc7d7c1a42618157957f02789a69111fef71567e61a98b7be421666d70fa928b340eb0c16afa76ba381d0ef7a5759d772916bf596ff202c20edd7fa4b8c3469a4f5b90851a0092b6084adbe8b065eddbb94272dcd674f118cf2d9b906fb1d640e72985557c3d22ee333be8f9f37febc6dc3c02e62f51332b85645ee6f05c80fbed851d22a74623e29a379dfcfa6e427c10285306052c895bdc9a74636f09ee5233d7df25ba9ddbb6c92cb665ad5706dd03073366051e0cfd5c693a2dd41777f590c72d0126d54f98178b2fad9df19579ac231f890d4557fa568f9148919fd51010e13e41181764529e02a4c660520b3687265762cb8ff12f0fdfbe44b3acb2c7e0023f0631e015b35631a45eced9e3ad0ca4faad71c4a27e3bc04dccccff314afda0d07854de111f24221969cea2c9c8afa28f34b685a5c6367e6037c237fdc22f6ef7fac920f0b90a90982a8e27af521fcaa763f396da62977c0103a237373bd9b524c4ee20f6fa7c447e746631173be3d8e6704c42146d745b6a7f136f7e3d4c7f45d130a0934fae7bdf94cbabab1ac11dd91fb03e754ce8486bd10527ce4ced5591a472582f6a0d2e7bc3c43e8b99e03b1e9a5dd0dcf71bc0184b51f4f315ff0d77c735a7590993ab15a0974e68be335bfb9c660895880d66d28efddfbe7569abdd60168047bd57de56db0567a8e2f35715d921bbb697ab8421941b959a9db8098665ea7ae4139d709005b6fd168f8a15adfcafa3543151479ea01da612c772a48171802204cfd93a97fc665653c27ccb9c875d04cd016fda02334b36b91f97b3987af7b6d42c3e1c978f6bf0d5f1679968305c850c0fc3f246cd0a92e56bdf8bd4f9d574ee7fd199f4ab6cb34716ad2033966e69aceb1bd2b1ff6ef8cc5b4aa4aa417ab2fc4c7a83531fe4a0d697540bd8b5c33362a22d1e1088681245fa7651a2f31042f47d97c4211c36f2f3779f603278196370fe9798bedb75aa8f62b375908ac770cf002304ca0bbb3dcbdf41f1f3971868c2ee7df292160d283a4643407ea2d299fb3fcf9b63cced305bde9dbca1e28cafdc2457dc31c5d4f3b9dcbac27cd0670d727fb451f9deeb2262ad94fb6f9b73f778407cc79e642d2ee2b746a726d4c1ef4b7bbc70e53c91a32fbeea923d9eb6e81c6b4f6a83398c4b6664a3ab0cb4aec1575b0414a07285466d3045ff16540ae8d5e40bfc514b3c2eb8b60396afaa207238624178411596ee3fe200ca3956be77e32a301f66b1aa9e0e44c78d9898748f78c10d253c709228c17bfdc9e950c7108932caeabb1557e272f6064bf6a1d6c3fc6d32b5489ea0077455c51dc59699eab59bf998c7d3436e3edd3cb4251099105ded33061d151c9cd6734b99e5dcdcdbee436b9d73dd7b297b185e97c32447bbb8615a4d876dc1a8330b642c503ed157d6e3782b7c78f4ab8d39343f61143aac19d952c39005f4508daa07d95ccaa133f49e4fccad4bc3ee3861ab1cb29532dd011beb926825b285dd260342438cdd577748e28f0fd31c5018895ac7f2541f0ea5743996459891252e69bbc9743e70555902ef25a8bc082fe42539dc6500deeefc63549c02184852ae32dbb1834f4d84a399b9e0285ecba9a5b296923bb978b337cc54d81bcd07fe607b006414f59d3180e8ab1f5877a74b48592f9644d117ab4cb74f627a27062dd3da9f7e8c5326e2c3b06f79824331956343e1aa079b0b885a8725ee3434869a84ebfd605a838a35fb79bfe4f58c0dd8f81127e5db509fd92868c6bebd588e41c0cf14374d9667aa5dd58f6ac5ef7007a2b95d071f7081d5d56eb79937a37be8231c9966a77a87ab9aa17201af15a083c3311f9854244b7034279309d858798fcd8a53aeb3cb0df5bb7f0e8da8654deccc206681e52616d88736e4465bed13682eb6460caa7ef3fb32fd406b6c1a8c5b01e92c3899eb3be2d50d64d8f493ee7acd89109967e8f8473f792ae3002f373b09f4e9f286453e88f0501a9f1cca01eb689054d420f2a1952e8736e811a8087e5314261d18b3c6f49c94fd4b91edce047b8e5835ea4fc9ed8f48b3a0ada645cee3e7713f18acc56f551538a09f19217187641e1af0b612fea29aa68cafeec294df4c6995f8cf130307089eec6597b4df44f5eb0146a271190be35381c4054b0147c70b1ad9245a5417809ad80965f6f45d67c7229da95b3761cef78f6c8b01aac55fc0ce87409ae588ddb79f26bbb286f70ecb0575310029b39fc506e74371e4981c1226d2fb86c66715bc85eb7a1d80e8204cc6c0c67dfdcc0f5250cf409890a152f5a720e52b0dd485c0e061507b09f509b289034b1f308114ca0214c88216ec7895c33e9ac5f9531b0b9318b2b514511d372d8f63aca5c1d2ef1a72291a2a64c35847283ff14709582d7c70a2cd36e81edd9a4b89191ff77bbaa607aa0da229b55acd36b93eb650d3d4c5b8f5f8e3f1bf98f48e662178f90ef5510f5ac2d7241df649d479794acb0762c259a7dd330fdfa07e9b9600a3fbb227f7641cd2fd28648c3fe25e5dbdd04b45cda8da231eebd745976e00172e14870a1d1b4b0b5a483f01decda921b5ce97bd3bb3f3158686b2c02b520186966f38c2bd1b3484baa81ee4a656050a28827a5e726f658542b3bc436fbd3aa5d49be68072756b71c03a45375c37429c535c739899f43b38bbad4ac99d21a880c5af5687600611e43e4b14a206bd4ebb5368142e926a9e484fa13017499e4c90816861a8b40866af8134c7af1c53a63c33dcb6293b07858148e0bac002c62c3b344459c38996fd0ddf1004477785876bee1d5c54bf39e624cb2b4a5ec2a63f006e3f8bc6e4e4e02102d8dba21f39bcff21c913ae121b11463b6778f2274c760ea7c1f1ef846a6226304735fcb922528a9d48e8fdb9e522115e8b80aa767fac4bdcf693fbf363ee9907065d165e44336f6c334d3799364cbc82ce565a0284d0a7d44075245d2a7687f4c2e058c8ea65149d9efe252844d003d9a083103b58d72e061bd5fc2287ba66dd19bec72c84179ecd5536be99e86c5fcf280177c5059289fe1253f30514f5d5fe0b7e0940edbc9e199366e5ae2bc898db3d161a1737bd686ef32d2b05e5ec82e06bb366fa351502f79724e7842e25e797b1719e6fe2d193f8333f06e87b902622abd651e0e7e12a0fba053a34da020702d8c29d4ab2a4c7fd02e76e7977bc0d0133b11d8d5d6c3863893b1edfa7a9f4821000092182e652c104b82e103b353bbafecfc01a574dbd180fef6e502737990e4f14d048424b727219038f0553f2d44b03e64de13fbe629cb0db59a4f95cc29ac69f4194c465bc687b38ae36f40923e0a0c4a02e7c0e2b62dbb3377e04f7b997d4736ee45eeb19004fb6f5894527dd3c4e2cc30289a684fe515193a4fcbad942b45f56352c9b35b3446f53d9d4e3c6a80e39d0357e37485895df9fa6f83a8c5ca0cb995b526452fd52561400e2a07330ea21bc702c41d5fae951af9a6b7b2f369cbf132434eaf9aeee17a76cef9fe621ece8ddd5b27f24e07bdbc90b13a44bc37d6573739978a6d95641754056be4042178ac95a996df820013189c917c00bae415b0aabd9fdeda0c521ef2736473b3949cf2c5cd7bf1a3f772de325a5bc7e1c65bec2964692720161c369055d3506a912968c55cfbe398fde6db2c8eb78be0f9552b8f420301c921877b04e952a5fab6668be8b51b397757c194ac9483a348b6992ebeca48aa5ed54cb37a1e03b37f0cdc12c9146d98851f93d70dabb667658bce8a332aec5738b824d55078395c1df9fcaad9a789c0779007c088a26817684fe583c6506160b88ddba3cba2d802f4f4d099483c066f1e1fb778e58d0e68a13c40a5d05574a47e1d0d5742744d24838f563dba73bc3a85ed59ca18fd94f6f1e3354bde3684c7d47446ee0edf0f992474176a6513027824a304bff9108ef998d5831a2010801dcfb4d3c376fa59aa06761a8454fc0dce584c5bcb61d4d2deeecaad82f0f3e6bb75d6e7e165eb5cbef19f2b79fba8760923c06ac0843075437ef6bbfe14efa97ab3c774ce73a84f879f1c0a2e0166058a3a5cd375757e889ac7fbb7f9a3161b4749c3d9a2975fe83f5334b29bd433a61a2b5dcc32b6ed979498715ae096edcb94b91558832c4cd8fa18a4f0ad9d2e111623456dbe25e645620887ee16f620024f472a1aeb2fc934a621749ae86b8732178e74c153831a1d71803b2abfde37ed97731a8e100c380be12c840870ce6bbec489943748a70d21e24fc884b9908426186ecbe296686739fe77d48138a3c1ab0950316d415e9188d464312eac208b58324d4a0545cd2417c2073bf14b1ce42edfcb64cecd6a2dac4d14d2684dc7a2aca7bc3ac6d19a5bd235fdbd588bdd18e535c232927793a03019f6c7f663b39232e49f87d8bfc5f0157a65f6a350a7aacf2b7ac7e0105fefa90a6bb5ccb5eba045df968c7bc5e8daf23c2e63ed7dc61f08be3ebca10cfdf327ca05ae21dcff3d5bc63147945c87893d0125c1d91f3d91d06492a0f18412e4d8b9f46ecf7fefa130da38abc171a8778c3f196e12d6cc12597aa608bfc780b36d7c5cbba359b3b33291eddb273b7186ce9d7e5c4ef3d34bcf73b607f19bbcc29f716dfb0e3c9bbbc3f67cae6a87c0e0693fdc4c735e6119459ea8768b6b39d17ea24e5d584789042264972cd438e336947dc934ca76e826fb775105c3ebd3db8db9ff48e0c2a09189adfcd9bc1041b75230dc6a0f22c084dc31951605dfcf2e51c319320936c162dfb9a90921a057a23a558d0d325b77b50a5788a446d2cf54eaad50e810c46127c79fe04e8a560bb899af80863a20b1f96e9d2bf158dd99bbb9e107dce6de70acdb7d94269e07f859b2186931281c8476467e879b08198dfdcdbcf8e1bfed0fe60b842c066e642d616c78d5fe9cd0e6f42b6a370b2037f03111533ad168b6ede759a33d80ab572668f2c0b10f57778c59ce5defba0dde29081a660ed83de5e19fe088880e8b1ee795bdb7155da9ab6badd1e63cea6d906d054371c6ca636a7e63688cc8c361bb356d77a017e845c3cfbc1cb1d8587f585301a814b9f3f4a9add6be6f91df16cf23debdb93d08b9af2d5e5512413321631e639aa1f861249fa7e79c4afc78ad6d46082dc8989a6bacf86d6b30eb164a7f32df779f86bbba52e7cfe858a18de913f7e716f2e841342da98f069203af1bf484b805ad82e8d302c25da12bd8f2c3f2386cf0b69e5f67c4f755e29eb0269e31a82872a9e05f94dbaeb75ae605605bcd0aa37832b29b316798de11864b0c17cd53d66cd72da1b388712bd4c1f7b3d10811e26d40b7284e2ed5f5a59760de8da84b4d33f86ed3eb56b4e720ffa583179568660a4028e8f87a77b10372297a939e02c04eb125e5dd984c9b870991fe5b1507f9455de0d9a12f7cd8de0f95888ae16fa2ead45bba41f977014e0a8d0094f0df219e267007e7c7f47d497576837bd292c34f2ab54c44556af055d2c1acbbe14487a377ee6cbf85b9ec8544c088e4e63ec5ab7b26f0e2f5b11bd1025cbf4e2eb5c65c40d45132a379e247395e6479bdef84a1153ac903d5be323c036bc0c05dacd7e8e218910b94869e8f3641ddd19220892f09e9a8962926d70f8ba7d1c7f5d4e27dffb613bb0c91b90ee38b4b322b21f451c81bc360928e607df2d4d5632286ed86ec5e67c16581dfc900b24f906ac3cac3741d9d07bedbb07339bdfee68502fe669c2997ef6fcdfb65a79bad9da59335220322e8d6076083362f7997dec0006e3823b0c2b6c38d7806bf15b1354b46194d7f2e488f8e16d57b1b8f41dfb04a62629be4b231cd52455f3dc49bdebdf9fa87acffadedc867d506d28402a26368507a65885ef8b0023bd692bc2e3c28e788f8694151d63de921794e0822441953b665c2636bb3b1b1cdcdaa5bdc18a12f5edb1534c8fae0793851d91974349c9bac3edf1df378303314457e378c23dec04778e1433c31b27b23e98cafef4b189a4d52c8a455558f969107faa1f250f9d54b8104bb7165a2dc7912af71755f291238e639094ff0092295f281a1f0cae8da8c9b08d4326a84c3220ba1f27542c8d7b48162d48562fe14be4f23605c308eae74a746fbbe729e2628e16a07f67aa7480b67d59f534f6ee57209813c906431976c4665c4644a27ef6239fe73e6ba472eb35a05a87c776584bb6ddbfa1cea2bfe7d5ad16ed009e5b5724404c1dc304624043ab095f728647a6a472f4c18a0a423b602a04a65f7454b8a456890184344222ce5d942e3805216c7300ed69204b3bb3d8bc07ca4642bb3ffd85aaaefcdf7c3ce854c1d1c8fef5dc3adc85c9447c75febd7f32b6249e32189e6062af26e686563be664d02c2ea9e0168aa1493d58add45c878b8864a06ab689464baf02006c0328c5556ed14df8523b37014ea324faeb44e20030d24af3b5e985e41614d77bfc36eb39ae0c6f02252594d7ec408625207be6a0a6aaf88d52449f6f5285104702b745d59b7ca0458350b6db63a219c9c99d48298ffe6ddce6364de579fb2eb1f1d58a5cd86cacc07b862ec4e03507e12f12878a3af3b5316f8f52bdae0a2ec29651a84685e40d6e01a1adfb15e81c47c46075d", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000300)={&(0x7f00000004c0)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 240.807378][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.818221][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.828481][ T60] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 240.837346][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.845740][ T60] usb 5-1: config 0 descriptor?? [ 241.054763][ T30] audit: type=1400 audit(1847638881.723:300): avc: denied { rename } for pid=7078 comm="syz-executor.1" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.077380][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.088188][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.098471][ T326] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.107492][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.115703][ T326] usb 4-1: config 0 descriptor?? [ 241.207345][ T358] usbhid 1-1:0.0: can't add hid device: -71 [ 241.213109][ T358] usbhid: probe of 1-1:0.0 failed with error -71 [ 241.219895][ T358] usb 1-1: USB disconnect, device number 45 [ 241.267417][ T2572] usb 3-1: MIDIStreaming interface descriptor not found [ 241.307845][ T60] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 241.314669][ T60] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 241.321447][ T60] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 241.328178][ T60] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 241.334914][ T60] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 241.342255][ T60] cp2112 0003:10C4:EA90.0065: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 241.469905][ T2572] usb 3-1: USB disconnect, device number 44 [ 241.527405][ T60] cp2112 0003:10C4:EA90.0065: error requesting version [ 241.534648][ T60] cp2112: probe of 0003:10C4:EA90.0065 failed with error -5 [ 241.587511][ T326] hid (null): bogus close delimiter executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) [ 241.661519][ T7083] syz-executor.0[7083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.661592][ T7083] syz-executor.0[7083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.807358][ T326] usb 4-1: language id specifier not provided by device, defaulting to English executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x2, 0x2100, 0x0, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x62c40, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) [ 241.991956][ T30] audit: type=1400 audit(1847638882.663:301): avc: denied { read } for pid=7086 comm="syz-executor.0" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) lstat(&(0x7f0000000040)='./file0\x00', 0x0) [ 242.032196][ T30] audit: type=1401 audit(1847638882.703:302): op=setxattr invalid_context="" [ 342.057292][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 342.063714][ C1] rcu: 1-...!: (10000 ticks this GP) idle=8a3/1/0x4000000000000000 softirq=28200/28200 fqs=0 last_accelerate: e90d/101e dyntick_enabled: 1 [ 342.077851][ C1] (t=10000 jiffies g=27817 q=136) [ 342.082887][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g27817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 342.095035][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=11549 [ 342.102759][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g27817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 342.113955][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 342.123762][ C1] rcu: RCU grace-period kthread stack dump: [ 342.129516][ C1] task:rcu_preempt state:I stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 342.138528][ C1] Call Trace: [ 342.141643][ C1] [ 342.144424][ C1] __schedule+0xccc/0x1590 [ 342.148677][ C1] ? __sched_text_start+0x8/0x8 [ 342.153388][ C1] ? __kasan_check_write+0x14/0x20 [ 342.158307][ C1] ? __kasan_check_write+0x14/0x20 [ 342.163255][ C1] schedule+0x11f/0x1e0 [ 342.167251][ C1] schedule_timeout+0x18c/0x370 [ 342.171931][ C1] ? __update_idle_core+0x2a0/0x2a0 [ 342.177032][ C1] ? console_conditional_schedule+0x30/0x30 [ 342.182693][ C1] ? update_process_times+0x200/0x200 [ 342.187902][ C1] ? prepare_to_swait_event+0x308/0x320 [ 342.193283][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 342.198183][ C1] ? debug_smp_processor_id+0x17/0x20 [ 342.203511][ C1] ? __note_gp_changes+0x4ab/0x920 [ 342.208450][ C1] ? rcu_gp_init+0xc30/0xc30 [ 342.212878][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 342.217909][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 342.222335][ C1] rcu_gp_kthread+0xa4/0x350 [ 342.226772][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 342.231449][ C1] ? rcu_barrier_callback+0x50/0x50 [ 342.236490][ C1] ? __kasan_check_read+0x11/0x20 [ 342.241343][ C1] ? __kthread_parkme+0xb2/0x200 [ 342.246296][ C1] kthread+0x421/0x510 [ 342.250456][ C1] ? rcu_barrier_callback+0x50/0x50 [ 342.256024][ C1] ? kthread_blkcg+0xd0/0xd0 [ 342.260438][ C1] ret_from_fork+0x1f/0x30 [ 342.264692][ C1] [ 342.267556][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 342.273726][ C1] NMI backtrace for cpu 1 [ 342.277890][ C1] CPU: 1 PID: 7089 Comm: syz-executor.2 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 342.289337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 342.299231][ C1] Call Trace: [ 342.302356][ C1] [ 342.305077][ C1] dump_stack_lvl+0x151/0x1b7 [ 342.309561][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 342.315028][ C1] dump_stack+0x15/0x17 [ 342.319020][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 342.323795][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 342.329784][ C1] ? panic+0x751/0x751 [ 342.333687][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 342.339589][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 342.345404][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 342.351306][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 342.357297][ C1] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 342.363395][ C1] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 342.370166][ C1] print_cpu_stall+0x310/0x5f0 [ 342.374782][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 342.379797][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 342.385786][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 342.390822][ C1] update_process_times+0x198/0x200 [ 342.395856][ C1] tick_sched_timer+0x188/0x240 [ 342.400540][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 342.405920][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 342.410957][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 342.415903][ C1] ? clockevents_program_event+0x22f/0x300 [ 342.421543][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 342.427446][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 342.432220][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 342.437948][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 342.443416][ C1] [ 342.446192][ C1] [ 342.448969][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 342.455225][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 342.459994][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 342.479437][ C1] RSP: 0018:ffffc900026672e0 EFLAGS: 00000246 [ 342.485343][ C1] RAX: 0000000000000003 RBX: 1ffff920004cce60 RCX: ffffffff8154f88f [ 342.493154][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88811614db88 [ 342.500961][ C1] RBP: ffffc90002667390 R08: dffffc0000000000 R09: ffffed1022c29b72 [ 342.508769][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 342.516581][ C1] R13: ffff88811614db88 R14: 0000000000000003 R15: 1ffff920004cce64 [ 342.524397][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 342.530466][ C1] ? asm_common_interrupt+0x27/0x40 [ 342.535673][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 342.540643][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 342.546699][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 342.552599][ C1] ? radix_tree_delete_item+0x2f1/0x3f0 [ 342.558587][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 342.564834][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 342.569608][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 342.574642][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 342.579936][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 342.584969][ C1] ? sock_map_unref+0x352/0x4d0 [ 342.589657][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 342.595036][ C1] bpf_trace_run2+0xec/0x210 [ 342.599465][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 342.604150][ C1] ? sock_map_unref+0x352/0x4d0 [ 342.608837][ C1] ? sock_map_unref+0x352/0x4d0 [ 342.613523][ C1] __bpf_trace_kfree+0x6f/0x90 [ 342.618124][ C1] ? sock_map_unref+0x352/0x4d0 [ 342.622809][ C1] kfree+0x1f3/0x220 [ 342.626549][ C1] sock_map_unref+0x352/0x4d0 [ 342.631063][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 342.636180][ C1] ? ida_alloc_range+0x987/0xa80 [ 342.640949][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 342.646330][ C1] bpf_trace_run2+0xec/0x210 [ 342.650756][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 342.655442][ C1] ? ida_alloc_range+0x987/0xa80 [ 342.660220][ C1] ? ida_alloc_range+0x987/0xa80 [ 342.664993][ C1] __bpf_trace_kfree+0x6f/0x90 [ 342.669592][ C1] ? ida_alloc_range+0x987/0xa80 [ 342.674374][ C1] kfree+0x1f3/0x220 [ 342.678097][ C1] ? xas_nomem+0x19a/0x1d0 [ 342.682347][ C1] ida_alloc_range+0x987/0xa80 [ 342.686949][ C1] ? kvmalloc_node+0x1f0/0x4d0 [ 342.691550][ C1] ? idr_replace+0x230/0x230 [ 342.695975][ C1] ? __kasan_check_write+0x14/0x20 [ 342.700930][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 342.705525][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 342.710741][ C1] set_anon_super+0x2c/0xb0 [ 342.715083][ C1] v9fs_set_super+0x47/0x50 [ 342.719410][ C1] sget+0x218/0x4c0 [ 342.723053][ C1] ? v9fs_kill_super+0x90/0x90 [ 342.727655][ C1] v9fs_mount+0xaf/0x7f0 [ 342.731744][ C1] legacy_get_tree+0xf1/0x190 [ 342.736253][ C1] ? incfs_get_verity_signature+0x420/0x420 [ 342.741978][ C1] vfs_get_tree+0x88/0x290 [ 342.746228][ C1] do_new_mount+0x2ba/0xb30 [ 342.750568][ C1] ? do_move_mount_old+0x160/0x160 [ 342.755624][ C1] ? security_capable+0x87/0xb0 [ 342.760354][ C1] ? ns_capable+0x89/0xe0 [ 342.764453][ C1] path_mount+0x671/0x1070 [ 342.768709][ C1] __se_sys_mount+0x2c4/0x3b0 [ 342.773229][ C1] ? __x64_sys_mount+0xd0/0xd0 [ 342.777820][ C1] ? __kasan_check_read+0x11/0x20 [ 342.782679][ C1] __x64_sys_mount+0xbf/0xd0 [ 342.787110][ C1] do_syscall_64+0x3d/0xb0 [ 342.791356][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 342.797085][ C1] RIP: 0033:0x7f9f64d41ea9 [ 342.801343][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 342.820784][ C1] RSP: 002b:00007f9f63ab50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.829023][ C1] RAX: ffffffffffffffda RBX: 00007f9f64e6ff80 RCX: 00007f9f64d41ea9 [ 342.836839][ C1] RDX: 00000000200001c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 342.844646][ C1] RBP: 00007f9f64d8e4a4 R08: 0000000020000440 R09: 0000000000000000 [ 342.852459][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.860813][ C1] R13: 000000000000000b R14: 00007f9f64e6ff80 R15: 00007ffc834a4d08 [ 342.868726][ C1] [ 342.871607][ C1] Sending NMI from CPU 1 to CPUs 0: [ 342.876730][ C0] NMI backtrace for cpu 0 [ 342.876740][ C0] CPU: 0 PID: 358 Comm: kworker/0:4 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 342.876758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 342.876770][ C0] Workqueue: events bpf_map_free_deferred [ 342.876791][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 342.876808][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 342.876822][ C0] RSP: 0018:ffffc900053b7740 EFLAGS: 00000246 [ 342.876834][ C0] RAX: 0000000000000001 RBX: 1ffff92000a76eec RCX: 1ffffffff0d1aa9c [ 342.876846][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 342.876856][ C0] RBP: ffffc900053b77f0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 342.876868][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 342.876879][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000a76ef0 [ 342.876891][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 342.876905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.876916][ C0] CR2: 0000001b2e121000 CR3: 000000011540e000 CR4: 00000000003506b0 [ 342.876931][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.876941][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.876951][ C0] Call Trace: [ 342.876957][ C0] [ 342.876963][ C0] ? show_regs+0x58/0x60 [ 342.876979][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 342.876998][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 342.877016][ C0] ? kvm_wait+0x147/0x180 [ 342.877030][ C0] ? kvm_wait+0x147/0x180 [ 342.877044][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 342.877060][ C0] ? nmi_handle+0xa8/0x280 [ 342.877075][ C0] ? kvm_wait+0x147/0x180 [ 342.877089][ C0] ? default_do_nmi+0x69/0x160 [ 342.877107][ C0] ? exc_nmi+0xaf/0x120 [ 342.877121][ C0] ? end_repeat_nmi+0x16/0x31 [ 342.877137][ C0] ? kvm_wait+0x147/0x180 [ 342.877151][ C0] ? kvm_wait+0x147/0x180 [ 342.877165][ C0] ? kvm_wait+0x147/0x180 [ 342.877179][ C0] [ 342.877184][ C0] [ 342.877189][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 342.877208][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 342.877224][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 342.877243][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 342.877261][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 342.877278][ C0] ? __schedule+0xcd4/0x1590 [ 342.877294][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 342.877310][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 342.877326][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 342.877345][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 342.877361][ C0] ? kvfree+0x35/0x40 [ 342.877374][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 342.877388][ C0] bpf_trace_run2+0xec/0x210 [ 342.877405][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 342.877420][ C0] ? kvfree+0x35/0x40 [ 342.877434][ C0] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 342.877450][ C0] ? kvfree+0x35/0x40 [ 342.877479][ C0] __bpf_trace_kfree+0x6f/0x90 [ 342.877494][ C0] ? kvfree+0x35/0x40 [ 342.877507][ C0] kfree+0x1f3/0x220 [ 342.877522][ C0] ? __alloc_reserved_percpu+0x30/0x30 [ 342.877539][ C0] ? mutex_unlock+0xb2/0x260 [ 342.877554][ C0] kvfree+0x35/0x40 [ 342.877567][ C0] bpf_map_area_free+0x15/0x20 [ 342.877580][ C0] prealloc_destroy+0x215/0x2c0 [ 342.877598][ C0] htab_map_free+0x68/0x5d0 [ 342.877614][ C0] ? selinux_bpf_map_free+0x58/0x70 [ 342.877631][ C0] bpf_map_free_deferred+0x10d/0x1e0 [ 342.877646][ C0] process_one_work+0x6bb/0xc10 [ 342.877663][ C0] worker_thread+0xad5/0x12a0 [ 342.877681][ C0] kthread+0x421/0x510 [ 342.877696][ C0] ? worker_clr_flags+0x180/0x180 [ 342.877709][ C0] ? kthread_blkcg+0xd0/0xd0 [ 342.877725][ C0] ret_from_fork+0x1f/0x30 [ 342.877742][ C0] [ 342.878714][ C1] NMI backtrace for cpu 1 [ 343.258121][ C1] CPU: 1 PID: 7089 Comm: syz-executor.2 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 343.269571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 343.279470][ C1] Call Trace: [ 343.282590][ C1] [ 343.285283][ C1] dump_stack_lvl+0x151/0x1b7 [ 343.289794][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 343.295264][ C1] ? cpumask_next+0x8a/0xb0 [ 343.299601][ C1] dump_stack+0x15/0x17 [ 343.303595][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 343.308367][ C1] ? init_x2apic_ldr+0x10/0x10 [ 343.312972][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 343.318954][ C1] ? irq_work_queue+0xd4/0x160 [ 343.323555][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 343.329458][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 343.335706][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 343.341610][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 343.347342][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 343.352287][ C1] print_cpu_stall+0x315/0x5f0 [ 343.357935][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 343.362957][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 343.368958][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 343.374037][ C1] update_process_times+0x198/0x200 [ 343.379050][ C1] tick_sched_timer+0x188/0x240 [ 343.383702][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 343.389084][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 343.394120][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 343.399062][ C1] ? clockevents_program_event+0x22f/0x300 [ 343.404705][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 343.410606][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 343.415383][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 343.421195][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 343.426662][ C1] [ 343.429440][ C1] [ 343.432222][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 343.438035][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 343.442805][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 343.462331][ C1] RSP: 0018:ffffc900026672e0 EFLAGS: 00000246 [ 343.468233][ C1] RAX: 0000000000000003 RBX: 1ffff920004cce60 RCX: ffffffff8154f88f [ 343.476043][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88811614db88 [ 343.483864][ C1] RBP: ffffc90002667390 R08: dffffc0000000000 R09: ffffed1022c29b72 [ 343.491669][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 343.499479][ C1] R13: ffff88811614db88 R14: 0000000000000003 R15: 1ffff920004cce64 [ 343.507293][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 343.513368][ C1] ? asm_common_interrupt+0x27/0x40 [ 343.518400][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 343.523345][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 343.529421][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 343.535326][ C1] ? radix_tree_delete_item+0x2f1/0x3f0 [ 343.540714][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 343.546954][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 343.551730][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 343.556934][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 343.562329][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 343.567369][ C1] ? sock_map_unref+0x352/0x4d0 [ 343.572053][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 343.577438][ C1] bpf_trace_run2+0xec/0x210 [ 343.581857][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 343.586542][ C1] ? sock_map_unref+0x352/0x4d0 [ 343.591259][ C1] ? sock_map_unref+0x352/0x4d0 [ 343.595924][ C1] __bpf_trace_kfree+0x6f/0x90 [ 343.600516][ C1] ? sock_map_unref+0x352/0x4d0 [ 343.605203][ C1] kfree+0x1f3/0x220 [ 343.608935][ C1] sock_map_unref+0x352/0x4d0 [ 343.613449][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 343.618570][ C1] ? ida_alloc_range+0x987/0xa80 [ 343.623340][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 343.628730][ C1] bpf_trace_run2+0xec/0x210 [ 343.633150][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 343.637837][ C1] ? ida_alloc_range+0x987/0xa80 [ 343.642695][ C1] ? ida_alloc_range+0x987/0xa80 [ 343.647470][ C1] __bpf_trace_kfree+0x6f/0x90 [ 343.652068][ C1] ? ida_alloc_range+0x987/0xa80 [ 343.657450][ C1] kfree+0x1f3/0x220 [ 343.661183][ C1] ? xas_nomem+0x19a/0x1d0 [ 343.665437][ C1] ida_alloc_range+0x987/0xa80 [ 343.670036][ C1] ? kvmalloc_node+0x1f0/0x4d0 [ 343.674634][ C1] ? idr_replace+0x230/0x230 [ 343.679061][ C1] ? __kasan_check_write+0x14/0x20 [ 343.684009][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 343.688614][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 343.694694][ C1] set_anon_super+0x2c/0xb0 [ 343.699035][ C1] v9fs_set_super+0x47/0x50 [ 343.703373][ C1] sget+0x218/0x4c0 [ 343.707018][ C1] ? v9fs_kill_super+0x90/0x90 [ 343.711632][ C1] v9fs_mount+0xaf/0x7f0 [ 343.715710][ C1] legacy_get_tree+0xf1/0x190 [ 343.720214][ C1] ? incfs_get_verity_signature+0x420/0x420 [ 343.726030][ C1] vfs_get_tree+0x88/0x290 [ 343.730282][ C1] do_new_mount+0x2ba/0xb30 [ 343.734624][ C1] ? do_move_mount_old+0x160/0x160 [ 343.739566][ C1] ? security_capable+0x87/0xb0 [ 343.744263][ C1] ? ns_capable+0x89/0xe0 [ 343.748417][ C1] path_mount+0x671/0x1070 [ 343.752673][ C1] __se_sys_mount+0x2c4/0x3b0 [ 343.757271][ C1] ? __x64_sys_mount+0xd0/0xd0 [ 343.761960][ C1] ? __kasan_check_read+0x11/0x20 [ 343.766816][ C1] __x64_sys_mount+0xbf/0xd0 [ 343.771253][ C1] do_syscall_64+0x3d/0xb0 [ 343.775498][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 343.781229][ C1] RIP: 0033:0x7f9f64d41ea9 [ 343.785490][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 343.804922][ C1] RSP: 002b:00007f9f63ab50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.813169][ C1] RAX: ffffffffffffffda RBX: 00007f9f64e6ff80 RCX: 00007f9f64d41ea9 [ 343.820974][ C1] RDX: 00000000200001c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 343.828873][ C1] RBP: 00007f9f64d8e4a4 R08: 0000000020000440 R09: 0000000000000000 [ 343.836717][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.844495][ C1] R13: 000000000000000b R14: 00007f9f64e6ff80 R15: 00007ffc834a4d08 [ 343.852311][ C1] [ 485.058367][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/0:4:358] [ 485.066559][ C0] Modules linked in: [ 485.070339][ C0] CPU: 0 PID: 358 Comm: kworker/0:4 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 485.081530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 485.091427][ C0] Workqueue: events bpf_map_free_deferred [ 485.096980][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 485.101752][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 485.121976][ C0] RSP: 0018:ffffc900053b7740 EFLAGS: 00000246 [ 485.127877][ C0] RAX: 0000000000000001 RBX: 1ffff92000a76eec RCX: 1ffffffff0d1aa9c [ 485.135725][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 485.144514][ C0] RBP: ffffc900053b77f0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 485.152323][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 485.160246][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000a76ef0 [ 485.168061][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 485.176825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.183245][ C0] CR2: 0000001b2e121000 CR3: 000000011540e000 CR4: 00000000003506b0 [ 485.191063][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.198868][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.208295][ C0] Call Trace: [ 485.211507][ C0] [ 485.214200][ C0] ? show_regs+0x58/0x60 [ 485.218273][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 485.223224][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 485.228528][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 485.233751][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 485.239480][ C0] ? clockevents_program_event+0x22f/0x300 [ 485.245405][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 485.251303][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 485.256251][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 485.262144][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 485.267786][ C0] [ 485.270563][ C0] [ 485.273341][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.279333][ C0] ? kvm_wait+0x147/0x180 [ 485.283495][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.289483][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 485.294433][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 485.300334][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 485.305114][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 485.311367][ C0] ? __schedule+0xcd4/0x1590 [ 485.315793][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 485.320650][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 485.325684][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 485.330980][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 485.336017][ C0] ? kvfree+0x35/0x40 [ 485.339832][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 485.345300][ C0] bpf_trace_run2+0xec/0x210 [ 485.349735][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.354420][ C0] ? kvfree+0x35/0x40 [ 485.358235][ C0] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 485.363915][ C0] ? kvfree+0x35/0x40 [ 485.367691][ C0] __bpf_trace_kfree+0x6f/0x90 [ 485.372292][ C0] ? kvfree+0x35/0x40 [ 485.376107][ C0] kfree+0x1f3/0x220 [ 485.379844][ C0] ? __alloc_reserved_percpu+0x30/0x30 [ 485.385145][ C0] ? mutex_unlock+0xb2/0x260 [ 485.389568][ C0] kvfree+0x35/0x40 [ 485.393211][ C0] bpf_map_area_free+0x15/0x20 [ 485.397815][ C0] prealloc_destroy+0x215/0x2c0 [ 485.402497][ C0] htab_map_free+0x68/0x5d0 [ 485.406835][ C0] ? selinux_bpf_map_free+0x58/0x70 [ 485.411869][ C0] bpf_map_free_deferred+0x10d/0x1e0 [ 485.416991][ C0] process_one_work+0x6bb/0xc10 [ 485.421678][ C0] worker_thread+0xad5/0x12a0 [ 485.426202][ C0] kthread+0x421/0x510 [ 485.430105][ C0] ? worker_clr_flags+0x180/0x180 [ 485.435105][ C0] ? kthread_blkcg+0xd0/0xd0 [ 485.440101][ C0] ret_from_fork+0x1f/0x30 [ 485.444994][ C0] [ 485.447847][ C0] Sending NMI from CPU 0 to CPUs 1: [ 485.453027][ C1] NMI backtrace for cpu 1 [ 485.453040][ C1] CPU: 1 PID: 7089 Comm: syz-executor.2 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 485.453058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 485.453068][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 485.453091][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 485.453104][ C1] RSP: 0018:ffffc900026672e0 EFLAGS: 00000246 [ 485.453118][ C1] RAX: 0000000000000003 RBX: 1ffff920004cce60 RCX: ffffffff8154f88f [ 485.453130][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88811614db88 [ 485.453142][ C1] RBP: ffffc90002667390 R08: dffffc0000000000 R09: ffffed1022c29b72 [ 485.453154][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 485.453165][ C1] R13: ffff88811614db88 R14: 0000000000000003 R15: 1ffff920004cce64 [ 485.453176][ C1] FS: 00007f9f63ab56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 485.453191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.453203][ C1] CR2: 0000555556b7b858 CR3: 0000000122f65000 CR4: 00000000003506a0 [ 485.453217][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.453226][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.453241][ C1] Call Trace: [ 485.453247][ C1] [ 485.453254][ C1] ? show_regs+0x58/0x60 [ 485.453270][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 485.453289][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 485.453308][ C1] ? kvm_wait+0x147/0x180 [ 485.453321][ C1] ? kvm_wait+0x147/0x180 [ 485.453335][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 485.453351][ C1] ? nmi_handle+0xa8/0x280 [ 485.453366][ C1] ? kvm_wait+0x147/0x180 [ 485.453381][ C1] ? default_do_nmi+0x69/0x160 [ 485.453397][ C1] ? exc_nmi+0xaf/0x120 [ 485.453411][ C1] ? end_repeat_nmi+0x16/0x31 [ 485.453427][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 485.453445][ C1] ? kvm_wait+0x147/0x180 [ 485.453459][ C1] ? kvm_wait+0x147/0x180 [ 485.453474][ C1] ? kvm_wait+0x147/0x180 [ 485.453487][ C1] [ 485.453492][ C1] [ 485.453497][ C1] ? asm_common_interrupt+0x27/0x40 [ 485.453511][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 485.453526][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 485.453544][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 485.453561][ C1] ? radix_tree_delete_item+0x2f1/0x3f0 [ 485.453579][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 485.453598][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 485.453615][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 485.453632][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 485.453650][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 485.453667][ C1] ? sock_map_unref+0x352/0x4d0 [ 485.453682][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 485.453695][ C1] bpf_trace_run2+0xec/0x210 [ 485.453713][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.453728][ C1] ? sock_map_unref+0x352/0x4d0 [ 485.453744][ C1] ? sock_map_unref+0x352/0x4d0 [ 485.453758][ C1] __bpf_trace_kfree+0x6f/0x90 [ 485.453774][ C1] ? sock_map_unref+0x352/0x4d0 [ 485.453788][ C1] kfree+0x1f3/0x220 [ 485.453804][ C1] sock_map_unref+0x352/0x4d0 [ 485.453821][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 485.453837][ C1] ? ida_alloc_range+0x987/0xa80 [ 485.453852][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x5cc [ 485.453864][ C1] bpf_trace_run2+0xec/0x210 [ 485.453880][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.453896][ C1] ? ida_alloc_range+0x987/0xa80 [ 485.453911][ C1] ? ida_alloc_range+0x987/0xa80 [ 485.453926][ C1] __bpf_trace_kfree+0x6f/0x90 [ 485.453940][ C1] ? ida_alloc_range+0x987/0xa80 [ 485.453954][ C1] kfree+0x1f3/0x220 [ 485.453969][ C1] ? xas_nomem+0x19a/0x1d0 [ 485.453984][ C1] ida_alloc_range+0x987/0xa80 [ 485.453998][ C1] ? kvmalloc_node+0x1f0/0x4d0 [ 485.454015][ C1] ? idr_replace+0x230/0x230 [ 485.454030][ C1] ? __kasan_check_write+0x14/0x20 [ 485.454045][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 485.454061][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 485.454078][ C1] set_anon_super+0x2c/0xb0 [ 485.454093][ C1] v9fs_set_super+0x47/0x50 [ 485.454110][ C1] sget+0x218/0x4c0 [ 485.454123][ C1] ? v9fs_kill_super+0x90/0x90 [ 485.454140][ C1] v9fs_mount+0xaf/0x7f0 [ 485.454157][ C1] legacy_get_tree+0xf1/0x190 [ 485.454172][ C1] ? incfs_get_verity_signature+0x420/0x420 [ 485.454190][ C1] vfs_get_tree+0x88/0x290 [ 485.454206][ C1] do_new_mount+0x2ba/0xb30 [ 485.454221][ C1] ? do_move_mount_old+0x160/0x160 [ 485.454240][ C1] ? security_capable+0x87/0xb0 [ 485.454257][ C1] ? ns_capable+0x89/0xe0 [ 485.454271][ C1] path_mount+0x671/0x1070 [ 485.454287][ C1] __se_sys_mount+0x2c4/0x3b0 [ 485.454303][ C1] ? __x64_sys_mount+0xd0/0xd0 [ 485.454318][ C1] ? __kasan_check_read+0x11/0x20 [ 485.454333][ C1] __x64_sys_mount+0xbf/0xd0 [ 485.454349][ C1] do_syscall_64+0x3d/0xb0 [ 485.454362][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 485.454380][ C1] RIP: 0033:0x7f9f64d41ea9 [ 485.454395][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 485.454408][ C1] RSP: 002b:00007f9f63ab50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 485.454423][ C1] RAX: ffffffffffffffda RBX: 00007f9f64e6ff80 RCX: 00007f9f64d41ea9 [ 485.454435][ C1] RDX: 00000000200001c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 485.454445][ C1] RBP: 00007f9f64d8e4a4 R08: 0000000020000440 R09: 0000000000000000 [ 485.454455][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.454464][ C1] R13: 000000000000000b R14: 00007f9f64e6ff80 R15: 00007ffc834a4d08 [ 485.454478][ C1]