000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 11:09:37 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0xfffffffffffffdef) 11:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfeffffff, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) 11:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xff000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:37 executing program 3 (fault-call:5 fault-nth:34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:37 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xff, 0x800, 0x204, 0x7f, 0x2, 0x7, 0x7, 0x7d7be027}, 0x20) preadv(r2, &(0x7f0000000180), 0x0, 0xffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x20, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r3}, 0x10) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8001, 0x47425247, 0x3, @stepwise={0x2, 0x7, 0x101, 0x7f, 0xffffe942, 0x5}}) vmsplice(r1, 0x0, 0x0, 0x0) 11:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfffffdf9, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1133.767532][T25473] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1133.801998][T17856] FAULT_INJECTION: forcing a failure. [ 1133.801998][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.857724][T17856] CPU: 1 PID: 17856 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1133.866403][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.876513][T17856] Call Trace: [ 1133.879793][T17856] dump_stack+0x10f/0x19d [ 1133.884115][T17856] should_fail+0x23c/0x250 [ 1133.888532][T17856] __should_failslab+0x81/0x90 [ 1133.893388][T17856] should_failslab+0x5/0x20 [ 1133.897878][T17856] slab_pre_alloc_hook+0x20/0xd0 [ 1133.902806][T17856] kmem_cache_alloc+0x4f/0x2d0 [ 1133.907557][T17856] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1133.913349][T17856] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1133.918965][T17856] kvm_mmu_load+0x53/0x9c0 [ 1133.923380][T17856] ? check_preemption_disabled+0x51/0x140 [ 1133.929082][T17856] ? vmx_flush_tlb_all+0x4f/0x220 [ 1133.934092][T17856] vcpu_enter_guest+0x1c74/0x2660 [ 1133.939211][T17856] ? emulation_required+0x67/0x940 [ 1133.944348][T17856] vcpu_run+0x26e/0x740 [ 1133.948530][T17856] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1133.953979][T17856] kvm_vcpu_ioctl+0x565/0x950 [ 1133.958656][T17856] ? tomoyo_file_ioctl+0x1c/0x20 [ 1133.963578][T17856] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1133.969473][T17856] __se_sys_ioctl+0xcb/0x140 [ 1133.974045][T17856] __x64_sys_ioctl+0x3f/0x50 [ 1133.978622][T17856] do_syscall_64+0x39/0x80 [ 1133.983028][T17856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1133.988900][T17856] RIP: 0033:0x45de59 [ 1133.992773][T17856] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1134.012357][T17856] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.020752][T17856] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1134.028703][T17856] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1134.036660][T17856] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.044619][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 1134.052582][T17856] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1134.337541][T25473] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1134.348677][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.359545][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.369345][T25473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1134.382284][T25473] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1134.391313][T25473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.402107][T25473] usb 6-1: config 0 descriptor?? [ 1134.868421][T25473] uclogic 0003:5543:0522.0025: item fetching failed at offset 0/1 [ 1134.876285][T25473] uclogic 0003:5543:0522.0025: parse failed [ 1134.882389][T25473] uclogic: probe of 0003:5543:0522.0025 failed with error -22 [ 1135.069112][T25473] usb 6-1: USB disconnect, device number 73 [ 1135.837427][T25473] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1136.218683][T25473] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1136.229477][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.240559][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.250417][T25473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1136.263417][T25473] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1136.272527][T25473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.281320][T25473] usb 6-1: config 0 descriptor?? 11:09:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x54) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:09:40 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/156) 11:09:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xffffff7f, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:40 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) 11:09:40 executing program 3 (fault-call:5 fault-nth:35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:40 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 11:09:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xffffff8c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1136.511201][T17916] FAULT_INJECTION: forcing a failure. [ 1136.511201][T17916] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.537291][T25473] usbhid 6-1:0.0: can't add hid device: -71 [ 1136.545636][T25473] usbhid: probe of 6-1:0.0 failed with error -71 11:09:40 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) 11:09:40 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1136.564219][T25473] usb 6-1: USB disconnect, device number 74 [ 1136.586190][T17916] CPU: 1 PID: 17916 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1136.594953][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.604990][T17916] Call Trace: [ 1136.608325][T17916] dump_stack+0x10f/0x19d [ 1136.612692][T17916] should_fail+0x23c/0x250 [ 1136.617101][T17916] __should_failslab+0x81/0x90 [ 1136.621858][T17916] should_failslab+0x5/0x20 [ 1136.626350][T17916] slab_pre_alloc_hook+0x20/0xd0 [ 1136.631282][T17916] kmem_cache_alloc+0x4f/0x2d0 [ 1136.636033][T17916] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1136.641830][T17916] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1136.647443][T17916] kvm_mmu_load+0x53/0x9c0 [ 1136.651841][T17916] ? check_preemption_disabled+0x51/0x140 [ 1136.657545][T17916] ? vmx_flush_tlb_all+0x4f/0x220 [ 1136.662553][T17916] vcpu_enter_guest+0x1c74/0x2660 [ 1136.667569][T17916] vcpu_run+0x26e/0x740 [ 1136.671716][T17916] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1136.677162][T17916] kvm_vcpu_ioctl+0x565/0x950 [ 1136.681854][T17916] ? tomoyo_file_ioctl+0x1c/0x20 [ 1136.686781][T17916] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1136.692665][T17916] __se_sys_ioctl+0xcb/0x140 [ 1136.697242][T17916] __x64_sys_ioctl+0x3f/0x50 [ 1136.701821][T17916] do_syscall_64+0x39/0x80 [ 1136.706235][T17916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1136.712118][T17916] RIP: 0033:0x45de59 [ 1136.716000][T17916] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1136.735591][T17916] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1136.743991][T17916] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1136.751949][T17916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1136.759905][T17916] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.767862][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 1136.775817][T17916] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @broadcast}, &(0x7f0000000040)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:41 executing program 3 (fault-call:5 fault-nth:36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:41 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) [ 1136.932283][T17970] FAULT_INJECTION: forcing a failure. [ 1136.932283][T17970] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.963408][T17970] CPU: 1 PID: 17970 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1136.972089][T17970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.982128][T17970] Call Trace: [ 1136.985506][T17970] dump_stack+0x10f/0x19d [ 1136.989868][T17970] should_fail+0x23c/0x250 [ 1136.994273][T17970] __should_failslab+0x81/0x90 [ 1136.999020][T17970] should_failslab+0x5/0x20 [ 1137.003506][T17970] slab_pre_alloc_hook+0x20/0xd0 [ 1137.008425][T17970] kmem_cache_alloc+0x4f/0x2d0 [ 1137.013178][T17970] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1137.018965][T17970] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1137.024585][T17970] kvm_mmu_load+0x53/0x9c0 [ 1137.029023][T17970] ? check_preemption_disabled+0x51/0x140 [ 1137.034749][T17970] ? vmx_flush_tlb_all+0x4f/0x220 [ 1137.039756][T17970] vcpu_enter_guest+0x1c74/0x2660 [ 1137.044763][T17970] ? emulation_required+0x67/0x940 [ 1137.049863][T17970] vcpu_run+0x26e/0x740 [ 1137.054099][T17970] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1137.059544][T17970] kvm_vcpu_ioctl+0x565/0x950 [ 1137.064213][T17970] ? tomoyo_file_ioctl+0x1c/0x20 [ 1137.069190][T17970] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1137.075067][T17970] __se_sys_ioctl+0xcb/0x140 [ 1137.079691][T17970] __x64_sys_ioctl+0x3f/0x50 [ 1137.084265][T17970] do_syscall_64+0x39/0x80 [ 1137.088673][T17970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1137.094551][T17970] RIP: 0033:0x45de59 [ 1137.098436][T17970] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1137.118035][T17970] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.126436][T17970] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1137.134488][T17970] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1137.142446][T17970] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.150403][T17970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1137.158364][T17970] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1137.327229][T25473] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1137.687190][T25473] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1137.699185][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.710678][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.720898][T25473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1137.734279][T25473] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1137.743635][T25473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.753168][T25473] usb 6-1: config 0 descriptor?? [ 1138.238050][T25473] uclogic 0003:5543:0522.0026: item fetching failed at offset 0/1 [ 1138.245905][T25473] uclogic 0003:5543:0522.0026: parse failed [ 1138.261464][T25473] uclogic: probe of 0003:5543:0522.0026 failed with error -22 [ 1138.438742][T25465] usb 6-1: USB disconnect, device number 75 [ 1139.217045][T25472] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1139.637048][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1139.647896][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.659411][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.669717][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1139.682964][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1139.692249][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.701655][T25472] usb 6-1: config 0 descriptor?? 11:09:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x61d, 0x59}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:09:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfffffff6, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:43 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x121004, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x201, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0x8480, 0x0) r4 = getpid() r5 = getpid() rt_tgsigqueueinfo(r4, r5, 0x16, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000540)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000580)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000480)=0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)={{}, {0x1, 0x5}, [{0x2, 0x3}, {0x2, 0x2, r9}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r10}, {}, {}, {0x8, 0x0, r10}], {0x10, 0x5}}, 0x64, 0x1) setregid(0x0, r10) sendmsg$netlink(r2, &(0x7f0000000500)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000280)={0x150, 0x20, 0x8, 0x70bd29, 0x25dfdbfb, "", [@generic="290b605a6869dad08a9af64faebd6e0a761e89337e", @typed={0x8, 0x1e, 0x0, 0x0, @uid=0xee00}, @nested={0xb0, 0x11, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @typed={0x4, 0x95}, @generic="11b394c9506d77da656444222a1298ddfa4b522fcdbaf997e240bc01fc21dea80c84f67864055c694b14079713942b33582c52bedf177b83720229e872d01f1d441c8f08e993406a596ff04e1feb4344edc847264fc8112ecfb7643fb9cbdec88c2296082286165c0f1c03c293c9399cdaabdf4b7bd152c1", @generic, @typed={0x8, 0x91, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x56}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="785ad9200e29d73653715edf7b4277f529fe2114f6616507d831a103203732c73595c1b0441cc0edea60522c50fa236abfeaa75faee585ea820d94d1dc6156a0b5b0875155626b9571409ec73c7cb608ebe2b649d4d88be8495c109154b7", @typed={0x8, 0x46, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x5}]}, 0x150}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r10}}}], 0x40, 0x20042000}, 0x800) 11:09:43 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 11:09:43 executing program 3 (fault-call:5 fault-nth:37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:43 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x0, 0xfffffffd]) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) connect$nfc_raw(r2, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x3}, 0x10) [ 1139.795728][T18022] FAULT_INJECTION: forcing a failure. [ 1139.795728][T18022] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.815825][T18022] CPU: 0 PID: 18022 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1139.824497][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.835140][T18022] Call Trace: [ 1139.838421][T18022] dump_stack+0x10f/0x19d [ 1139.842740][T18022] should_fail+0x23c/0x250 [ 1139.847147][T18022] __should_failslab+0x81/0x90 [ 1139.851902][T18022] should_failslab+0x5/0x20 [ 1139.856410][T18022] slab_pre_alloc_hook+0x20/0xd0 [ 1139.861422][T18022] kmem_cache_alloc+0x4f/0x2d0 [ 1139.866274][T18022] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1139.872168][T18022] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1139.877792][T18022] kvm_mmu_load+0x53/0x9c0 [ 1139.882194][T18022] ? check_preemption_disabled+0x51/0x140 [ 1139.887896][T18022] ? vmx_flush_tlb_all+0x4f/0x220 [ 1139.892916][T18022] vcpu_enter_guest+0x1c74/0x2660 [ 1139.897959][T18022] ? emulation_required+0x67/0x940 [ 1139.903103][T18022] vcpu_run+0x26e/0x740 [ 1139.907266][T18022] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1139.912715][T18022] kvm_vcpu_ioctl+0x565/0x950 [ 1139.917376][T18022] ? tomoyo_file_ioctl+0x1c/0x20 [ 1139.922305][T18022] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1139.928188][T18022] __se_sys_ioctl+0xcb/0x140 [ 1139.932764][T18022] __x64_sys_ioctl+0x3f/0x50 [ 1139.937398][T18022] do_syscall_64+0x39/0x80 [ 1139.941801][T18022] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1139.947672][T18022] RIP: 0033:0x45de59 [ 1139.951625][T18022] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1139.971215][T18022] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.979620][T18022] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1139.987580][T18022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:09:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfffffffe, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:44 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) [ 1139.995588][T18022] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.003541][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 1140.011501][T18022] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xedc000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:44 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1140.047359][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1140.054148][T25472] usbhid: probe of 6-1:0.0 failed with error -71 [ 1140.085036][T25472] usb 6-1: USB disconnect, device number 76 11:09:44 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 11:09:44 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001700)='/dev/input/mice\x00', 0x80400) sendmmsg$inet_sctp(r2, &(0x7f0000001e80)=[{&(0x7f0000001740)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001780)="c296c29e4b308d60017122224694c124af9da5feda95079bc91741f3b9c5c65954fc0ffee5f521cab14e917717b663475849dbad8ec51dbc4eb7d5a50e3caf2d34c3e242e03cb624a2e3a99d115e3e1ff5379ed4b437da4cece0b505faff510a605a35801844afed91d1907a0144b6e3a790bb0e41eb9d9f70f734f472a587526c94ea4d929de642d6d7a103000d2647ceb47b8dd80d01c01cdc4bb3cdaf449f0dac174e9c4c51f9963298b532a499bd24e34478be4d624f7d2412dc465d0276df902c9b9bc5fa323696a8ed394e3f8e91e6e345d2f0e811b143b57175089265aa210d876f72d70aca5dad", 0xeb}, {&(0x7f0000001880)="9bb310cd3def49abe6599d36c4470a0838a39fcef46a", 0x16}, {&(0x7f00000018c0)="0ad311c9f6a76b44931a6743308c58d042bbb122667b7d70715f10f011fde35c599116309052665e7957c2dd45a1462bd00c976c9e8d05da47c95b5d60b9e262083e8edc061451ace53d69035758c30893c487eb2843c0293c89cd11ac94bae4d6f2cb9b946986b7457b1e5855bf7660070b0df6d2b0ee9bd41fc3b56e41e96bb8a19390fd6c66b5342d7f391f13d7c79a1332a480077940f523d08a04e8fbff95dc9df9c244f62123c129e2411a1f90b345", 0xb2}, {&(0x7f0000001980)="e1187e669ad148852d02a84bae315710476e209d5b533ad2416b5090b63afdcfdf43cdd0b98e7fbc4f92c3500939f643bbf1262e76a91be4235b2befea41b00c7c7499a09404d8bbd2e2e33511bedd59791dad70bed6e17f04fd0749e66f22f64ce314fccbcaf491847b34b3eb91074058c1e3d285bf5288d922a8175a3e37c02dca32828b52b4268c83bc808a8ad134a067491e733782c7a3e90b44f3e35ec51ce03d6f7b00074e87e6240a05e6a932bd04e4d8da2ecbec419b55aded34be555a2fe00c418a1c3d4be14012559d850d88", 0xd1}, {&(0x7f0000001a80)="1efa7143345fa6ba7076389f3a1b94eaf70fc11a5bc9fc6a7ebcd0b6de4598352cc1a53f3bc247eb7692a2f3c19500817ef7a9fa86ca0d2184d66db41597fb25f756e08970cba11943e326cab6cec18c3146a1cc7027ad2668583efedd068a9c84341c57c95153e02d54edc4f3ff9033db8df8b7307554c22282f6e2b01531bd83d97c96083431605a239a24b67c948c00eb727d44fe303de08f5d5c458c71a6e2af10c7816d8ce5f6a1037d48ea278ef39247c2fbb02c7274077636d6c97e434fc842fdd272dd59b74fd1db3cd90ae8ec67a161bc55f3de56bdda0531607358d6bf3094a75828dfbc274d25b02d7643e9cb40c8", 0xf4}, {&(0x7f0000001b80)="e7c41dc511bbb8a837ce1fd0be8476b14da9c23c1213625cff4f7b5a2b269667e4494c7c4df0e700d154fb661ade645dc0f269e51376078221023e6e39f920983ab611270b7a79db7ba0d74d6871e7d2192f7aa81ea2b16c1ae9acc52173dc8343add3e192306c03ee0c6b65b4a337c1c1590dd845771dfbad6c0f380452c8e72f7e261731ba1423525cbdcf12d6c0289ab5d554d8fa2e7ccc8fcb5faa99b180e091b133e292d619efe03abeb3e8958fe678de5f3c9f125c2b35616b605945be961fede5be6e6f189d380e776b1d26a017b42413f2aa70691347288414dfb5a8ee1894a84bf9ea49c9bfcee7a55fc49fda4e79b326", 0xf5}, {&(0x7f0000001c80)="3f22cb50b50fdb0b1470c368a5e694fffb033c531aea78b54f25fbdef3dbee3b338982455d4140f63cd77bf6dc7a5c81d036d243fd1431db5ac8a711992e2e567cd15c4aee00026f62a79b9ca2185ae05d50cd2ab0d54ece866f7567", 0x5c}, {&(0x7f0000001d00)="861c06bd14984ab2f928b6b4873133d8a58b145af0f9801997f4bae6731cadc456fbfecd86c17ea0a23f7e2ac3b68b0f52286f124e74c69ab35dc1201ad9c7ba96a24906b855dde4e2ac7123896a70f65473226f55d0753acbc3", 0x5a}], 0x8, &(0x7f0000001e00)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x48, 0x4}], 0x1, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "dacdddac6541b544", "b433fe6b27c39ae474a9a6a5cf8b9684", "f1097f90", "bfc968f780b300"}, 0x28) [ 1140.476898][T25472] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1140.916914][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1140.927716][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.939209][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.949246][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1140.962498][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1140.971901][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.983562][T25472] usb 6-1: config 0 descriptor?? [ 1141.467772][T25472] uclogic 0003:5543:0522.0027: item fetching failed at offset 0/1 [ 1141.475703][T25472] uclogic 0003:5543:0522.0027: parse failed [ 1141.490477][T25472] uclogic: probe of 0003:5543:0522.0027 failed with error -22 [ 1141.683406][T25472] usb 6-1: USB disconnect, device number 77 [ 1142.446728][T25465] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1142.806709][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1142.817537][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.828994][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.839312][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1142.852675][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1142.861994][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.870897][T25465] usb 6-1: config 0 descriptor?? 11:09:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:09:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:47 executing program 3 (fault-call:5 fault-nth:38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) 11:09:47 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff0100000000000010001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:47 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="8d2e7d5d3c604bf5c60c07ce70f45442153c4e43bd9d591791ba0993d2ae2e49499553f9889bc0a4ddb5b85310cfb65a6134b9b243efffb3de27567333659cdc4df0627d8c00000000000000000000000000000000e0cfdc02000c455361ac4111868db1bce7d4c7b2701c8cb9106bd7e1bcbd371fbb1a7dbea3a10b5a3813309ea5b438e9f592572cf48df8b16954a0e6d42c2b232b99e4712116af6263495841498bd508c61720f25ceec0a1ae1f46dcfe21ea37c3e1ccc66f165ecb02b18085", 0xc1) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) write$P9_RXATTRWALK(r3, &(0x7f00000002c0)={0xf, 0x1f, 0x1, 0xa3b3}, 0xf) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) socketpair(0x0, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x7f, &(0x7f0000000200)=0x1) 11:09:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x40000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1143.059782][T18130] FAULT_INJECTION: forcing a failure. [ 1143.059782][T18130] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.076730][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1143.082815][T25465] usbhid: probe of 6-1:0.0 failed with error -71 11:09:47 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ecffffff000000104911160211b3985fc7070000005bec3fef3393d2239cc102b68d774e34314b3e00010095"], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x216182, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xe8, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200008a1}, 0x40000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_misc(r7, &(0x7f00000002c0)={'syz0'}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000204a0dc6f4312f312d328c8b83915f4099b86bbce54050465ead8ff3c5ee4390debc2c06e396fc8a31778b376b979e83ee1621b42b003b5f7346af91129e63550816f28b89d870caa84006f8f9d7f61adfba4c", @ANYRES16=r5, @ANYBLOB="310300000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f528582}]}, 0x44}}, 0x0) [ 1143.117275][T25465] usb 6-1: USB disconnect, device number 78 [ 1143.133148][T18130] CPU: 0 PID: 18130 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1143.141911][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.151951][T18130] Call Trace: [ 1143.155283][T18130] dump_stack+0x10f/0x19d [ 1143.159597][T18130] should_fail+0x23c/0x250 [ 1143.164077][T18130] __should_failslab+0x81/0x90 [ 1143.168832][T18130] should_failslab+0x5/0x20 [ 1143.173341][T18130] slab_pre_alloc_hook+0x20/0xd0 [ 1143.178265][T18130] kmem_cache_alloc+0x4f/0x2d0 [ 1143.183017][T18130] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1143.188805][T18130] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1143.194448][T18130] kvm_mmu_load+0x53/0x9c0 [ 1143.198852][T18130] ? check_preemption_disabled+0x51/0x140 [ 1143.204552][T18130] ? vmx_flush_tlb_all+0x4f/0x220 [ 1143.209578][T18130] vcpu_enter_guest+0x1c74/0x2660 [ 1143.214622][T18130] ? emulation_required+0x67/0x940 [ 1143.219752][T18130] vcpu_run+0x26e/0x740 [ 1143.223920][T18130] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1143.229490][T18130] kvm_vcpu_ioctl+0x565/0x950 [ 1143.234155][T18130] ? tomoyo_file_ioctl+0x1c/0x20 [ 1143.239085][T18130] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1143.244985][T18130] __se_sys_ioctl+0xcb/0x140 [ 1143.249566][T18130] __x64_sys_ioctl+0x3f/0x50 [ 1143.254142][T18130] do_syscall_64+0x39/0x80 [ 1143.258576][T18130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1143.264449][T18130] RIP: 0033:0x45de59 [ 1143.268328][T18130] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1143.287943][T18130] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.296352][T18130] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1143.304307][T18130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:09:47 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0000, 0x8, 0x8}, 0x18) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0xa22c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x2, "e4b7ab9602be25725effe5ff553da8e9cc9e76b2817359b8a7e79d3739aa7b7e", 0x2}) 11:09:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x100000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1143.312260][T18130] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.320219][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 1143.328176][T18130] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) 11:09:47 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/157, 0x9d}, {&(0x7f00000000c0)=""/27, 0x1b}], 0x5) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) socket$inet(0x2, 0x5, 0x5) syz_mount_image$ntfs(&(0x7f0000001540)='ntfs\x00', &(0x7f0000001580)='./file0\x00', 0x1, 0x0, &(0x7f00000015c0), 0x1908000, &(0x7f0000001600)={[{@errors_continue='errors=continue'}], [{@obj_user={'obj_user', 0x3d, '$'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '%]-$\xf9:'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000015c0)=0x10000, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400000) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r4}, 0x10) vmsplice(r5, 0x0, 0x0, 0x0) [ 1143.686622][T25465] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1144.046624][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1144.057403][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.068605][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.078420][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1144.091446][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1144.100646][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.109301][T25465] usb 6-1: config 0 descriptor?? [ 1144.587636][T25465] uclogic 0003:5543:0522.0028: item fetching failed at offset 0/1 [ 1144.595580][T25465] uclogic 0003:5543:0522.0028: parse failed [ 1144.601759][T25465] uclogic: probe of 0003:5543:0522.0028 failed with error -22 [ 1144.788226][T25472] usb 6-1: USB disconnect, device number 79 [ 1145.556452][T25465] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1145.916406][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1145.927208][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.938696][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.948959][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1145.962280][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1145.971752][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.981342][T25465] usb 6-1: config 0 descriptor?? 11:09:50 executing program 5: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x1, 0x1f}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000401feb220540000000000109022400010000000009040000fd0301000009210000000122010009058103000000000034107871f682ee630d41ebbddeaae72be6138e4c0c9dec8f77329a4d2fe60bf9de47e3777b43236b4a139a0e5462f7c57414658b16ffb4ee15ded732de13367fc64c10bc4fa808b94d58dcded6036b2a573b2f54f23f69cbe0c0e07b013d79a1860e3f9df73d466bc795ed685f3844686ada94e01c3b216fa0aecc123bac711adb3088f57e2d5e92f705416ced"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) 11:09:50 executing program 3 (fault-call:5 fault-nth:39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:50 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 11:09:50 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000280)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r5}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=r7, @ANYBLOB="040001000000000008000200", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8c2c2698565c0856e5545609ee4fdd87d27bfb3d42e9204e0ea1cd51f4040e96dfbf16a3626e1f6edb964625c3167136bb31b7c198b6a1759e00b3dbfce5c7ad0663f721467b9096", @ANYRES32=0x0, @ANYBLOB="10000500000000002000000000000000"], 0x4c, 0x0) setregid(0x0, r8) write$FUSE_ATTR(r2, &(0x7f00000002c0)={0x78, 0x0, r5, {0xdc9, 0x1, 0x0, {0x4, 0xffff, 0x100000001, 0x30, 0x2, 0x3, 0x40, 0x1ff, 0x8000, 0x2000, 0x4, 0x0, r8, 0x7fff, 0x3}}}, 0x78) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="38e39ed9db"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r9}, 0x10) vmsplice(r2, 0x0, 0x0, 0x0) 11:09:50 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) read$hidraw(r0, &(0x7f0000001340)=""/4098, 0x1002) [ 1146.148720][T18224] FAULT_INJECTION: forcing a failure. [ 1146.148720][T18224] name failslab, interval 1, probability 0, space 0, times 0 11:09:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x300000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1146.198187][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1146.205057][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1146.234115][T18224] CPU: 1 PID: 18224 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1146.234490][T25465] usb 6-1: USB disconnect, device number 80 [ 1146.242809][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.242812][T18224] Call Trace: [ 1146.242829][T18224] dump_stack+0x10f/0x19d [ 1146.242842][T18224] should_fail+0x23c/0x250 [ 1146.242888][T18224] __should_failslab+0x81/0x90 [ 1146.242910][T18224] should_failslab+0x5/0x20 [ 1146.280070][T18224] slab_pre_alloc_hook+0x20/0xd0 [ 1146.285054][T18224] kmem_cache_alloc+0x4f/0x2d0 [ 1146.289851][T18224] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1146.295711][T18224] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1146.301364][T18224] kvm_mmu_load+0x53/0x9c0 [ 1146.305758][T18224] ? check_preemption_disabled+0x51/0x140 [ 1146.312406][T18224] ? vmx_flush_tlb_all+0x4f/0x220 [ 1146.317417][T18224] vcpu_enter_guest+0x1c74/0x2660 [ 1146.322417][T18224] ? emulation_required+0x67/0x940 [ 1146.327504][T18224] vcpu_run+0x26e/0x740 [ 1146.331724][T18224] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1146.337158][T18224] kvm_vcpu_ioctl+0x565/0x950 [ 1146.341862][T18224] ? tomoyo_file_ioctl+0x1c/0x20 [ 1146.346772][T18224] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1146.352650][T18224] __se_sys_ioctl+0xcb/0x140 [ 1146.357302][T18224] __x64_sys_ioctl+0x3f/0x50 [ 1146.361908][T18224] do_syscall_64+0x39/0x80 [ 1146.366299][T18224] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1146.372228][T18224] RIP: 0033:0x45de59 [ 1146.376100][T18224] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:09:50 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:50 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) [ 1146.395795][T18224] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1146.404179][T18224] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1146.412185][T18224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1146.420129][T18224] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.428082][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 1146.436026][T18224] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x400000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x500000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:50 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) [ 1146.746326][T25465] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1147.107547][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1147.118420][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.129691][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.139657][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1147.152684][T25465] usb 6-1: New USB device found, idVendor=eb1f, idProduct=0522, bcdDevice= 0.40 [ 1147.161757][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.170480][T25465] usb 6-1: config 0 descriptor?? [ 1147.646834][T25465] hid-generic 0003:EB1F:0522.0029: item fetching failed at offset 0/1 [ 1147.655346][T25465] hid-generic: probe of 0003:EB1F:0522.0029 failed with error -22 [ 1147.848685][T25472] usb 6-1: USB disconnect, device number 81 11:09:52 executing program 5: r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xc16, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x8, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x80, 0xc0}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x9, 0x8000, 0x7, 0x1}, 0x10) 11:09:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x600000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) 11:09:52 executing program 3 (fault-call:5 fault-nth:40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:52 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:52 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) preadv(r3, &(0x7f00000017c0), 0x0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) [ 1148.425421][T18316] FAULT_INJECTION: forcing a failure. [ 1148.425421][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.454815][T18316] CPU: 1 PID: 18316 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1148.463520][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.473558][T18316] Call Trace: [ 1148.476841][T18316] dump_stack+0x10f/0x19d [ 1148.481159][T18316] should_fail+0x23c/0x250 [ 1148.485564][T18316] __should_failslab+0x81/0x90 [ 1148.490314][T18316] should_failslab+0x5/0x20 [ 1148.494886][T18316] slab_pre_alloc_hook+0x20/0xd0 [ 1148.499814][T18316] kmem_cache_alloc+0x4f/0x2d0 [ 1148.504553][T18316] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1148.510374][T18316] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1148.515981][T18316] kvm_mmu_load+0x53/0x9c0 [ 1148.520388][T18316] ? check_preemption_disabled+0x51/0x140 [ 1148.526076][T18316] ? vmx_flush_tlb_all+0x4f/0x220 [ 1148.531177][T18316] vcpu_enter_guest+0x1c74/0x2660 [ 1148.536178][T18316] ? emulation_required+0x67/0x940 [ 1148.541277][T18316] vcpu_run+0x26e/0x740 [ 1148.545410][T18316] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1148.550841][T18316] kvm_vcpu_ioctl+0x565/0x950 [ 1148.555489][T18316] ? tomoyo_file_ioctl+0x1c/0x20 [ 1148.560412][T18316] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1148.566287][T18316] __se_sys_ioctl+0xcb/0x140 [ 1148.570852][T18316] __x64_sys_ioctl+0x3f/0x50 [ 1148.575422][T18316] do_syscall_64+0x39/0x80 [ 1148.579824][T18316] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1148.585685][T18316] RIP: 0033:0x45de59 [ 1148.589567][T18316] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1148.609975][T18316] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.618433][T18316] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:09:52 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "048eba9f7161926f16adfd11499de4589cbdd60ae2b58ba4079a8cae2e92b419a6cbcfbf3fcdf22603eb1d6d3f9a76615f25d6aeed0e967a2bc711dae295c94a947a049e92e1e2e4ee7e1ce2b898198b6dde9f41c04302286a903d4ce71959dd2c1e652f9b751d48828b52785e0eee44efaab81bc94d389942f92b39f1fb565efc4027f293327a8046003116c4459f"}, 0x93) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000001000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) [ 1148.626379][T18316] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1148.634331][T18316] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.642279][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 1148.650225][T18316] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x700000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 11:09:52 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x604, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) 11:09:52 executing program 0: pipe(&(0x7f0000000400)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0095eeb4105d496605bf4e4a9669f1bd85d9da1b08b559e2e7ff51c09659d5f849de7c2fce12575a48b2dd25a294a08c4d49de245a8f7550d1291612650df1e974937362a629b00c727bd2f9c0d1aff5bcd63285f8ec37f238e9fab0088259dfe595cdcaebafce95a1bd6a3bbd545eb42b56ff76db96a951ca6ab0af3c28e60b320e82c1e2f04e9b21d7b147cb759d4d20f1ebcf1bdf4164e39791b141d6a8ad24544fb4cd4fbea35c930594524d83cb1a9a0f0e1450dc72e5f87b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0xf) 11:09:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1148.976112][T25465] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1149.336117][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1149.346944][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.358558][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.368616][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1149.382037][T25465] usb 6-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.40 [ 1149.391399][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.401685][T25465] usb 6-1: config 0 descriptor?? [ 1149.726041][T25465] usb 6-1: string descriptor 0 read error: -71 [ 1149.826189][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1149.832152][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1149.843433][T25465] usb 6-1: USB disconnect, device number 82 [ 1150.475975][T25472] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1150.866029][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1150.876835][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.887973][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.897759][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1150.910901][T25472] usb 6-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.40 [ 1150.920052][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.930451][T25472] usb 6-1: config 0 descriptor?? 11:09:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x2, 0x32314742, 0x40, 0x2, 0x3, @discrete={0x0, 0x9}}) 11:09:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x25000000) 11:09:55 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x42, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x900000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:55 executing program 3 (fault-call:5 fault-nth:41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:55 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) poll(&(0x7f0000000080)=[{r1, 0x2}, {r2, 0x80}, {r0, 0x49}], 0x3, 0x7fffffff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1151.245892][T25472] usb 6-1: string descriptor 0 read error: -71 11:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xa00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:55 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1151.292355][T18404] FAULT_INJECTION: forcing a failure. [ 1151.292355][T18404] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.345881][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1151.351920][T25472] usbhid: probe of 6-1:0.0 failed with error -71 [ 1151.367512][T18404] CPU: 1 PID: 18404 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1151.376200][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.386245][T18404] Call Trace: [ 1151.389519][T18404] dump_stack+0x10f/0x19d [ 1151.393893][T18404] should_fail+0x23c/0x250 [ 1151.398298][T18404] __should_failslab+0x81/0x90 [ 1151.403043][T18404] should_failslab+0x5/0x20 [ 1151.407547][T18404] slab_pre_alloc_hook+0x20/0xd0 [ 1151.412462][T18404] kmem_cache_alloc+0x4f/0x2d0 [ 1151.417207][T18404] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1151.423017][T18404] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1151.428637][T18404] kvm_mmu_load+0x53/0x9c0 [ 1151.433040][T18404] ? check_preemption_disabled+0x51/0x140 [ 1151.438817][T18404] ? vmx_flush_tlb_all+0x4f/0x220 [ 1151.443917][T18404] vcpu_enter_guest+0x1c74/0x2660 [ 1151.448938][T18404] ? emulation_required+0x67/0x940 [ 1151.454039][T18404] vcpu_run+0x26e/0x740 [ 1151.458184][T18404] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1151.463628][T18404] kvm_vcpu_ioctl+0x565/0x950 [ 1151.468292][T18404] ? tomoyo_file_ioctl+0x1c/0x20 [ 1151.473222][T18404] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1151.479103][T18404] __se_sys_ioctl+0xcb/0x140 [ 1151.483689][T18404] __x64_sys_ioctl+0x3f/0x50 [ 1151.488271][T18404] do_syscall_64+0x39/0x80 [ 1151.492672][T18404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1151.498602][T18404] RIP: 0033:0x45de59 [ 1151.502477][T18404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1151.522082][T18404] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.530477][T18404] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1151.538465][T18404] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xb00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) [ 1151.546440][T18404] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.554385][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1151.562329][T18404] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1151.589273][T25472] usb 6-1: USB disconnect, device number 83 11:09:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34000000) 11:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xc00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1151.955838][T25472] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1152.325833][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1152.336671][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.347555][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.357309][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1152.370406][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1152.379457][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.389868][T25472] usb 6-1: config 0 descriptor?? [ 1152.866638][T25472] uclogic 0003:5543:0522.002A: item fetching failed at offset 0/1 [ 1152.874997][T25472] uclogic 0003:5543:0522.002A: parse failed [ 1152.881124][T25472] uclogic: probe of 0003:5543:0522.002A failed with error -22 [ 1153.070612][T25472] usb 6-1: USB disconnect, device number 84 [ 1153.835667][T25465] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1154.195638][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1154.206622][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.218059][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.228199][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1154.241400][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1154.250687][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.259509][T25465] usb 6-1: config 0 descriptor?? 11:09:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x100000000) 11:09:58 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000040)={&(0x7f0000000180)="6662e04c24f883168ae42f4cb53e119c9911519713ac05ba055a3f1954ccfb6bbb894c1bd3e7ea9d81d8e13153cd6f898b2073f2e7a4c3b4452edadd1344508771660c18a8d9e6af2630d7ccdb0ea9547d20688d54020ff2e482bea7fa95257bd5b9694111609d176fdf6a2d9280", 0x6e}, 0x1, 0x0, 0x0, 0x804}, 0x4000800) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e000000) 11:09:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xd00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:58 executing program 3 (fault-call:5 fault-nth:42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:58 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) sendto$rxrpc(r0, &(0x7f0000000100)="cefb2d25e2f559df2dd3b04c4ad66f21e17d01aa737064543af71f173c34ed1073908850e322b65dfc0ffafc4692b064235995a570bd65ea924721274a938ba2777afae5c3a8d679b75877c7a91860ff24127e2e9ef709736230cf44607b9936aabba52fb3f82a4c6f8231449b444ce95c96f48de80287061fa33b1c8f27a7dc067ad4e9e5f7b5cd9ff905f4972fafe97b22bbcc8dfef9756a74ddce17d663b53a17c58c1d1e7830c7ebe789b9714977da8cd0b4d50a93ad9217dc84616bd7b5bf65168e81abba16c9dfd1b424b8eb422426", 0xd2, 0x4004080, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x76, 0xab8, 0x80000000, 0xcccccccc}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000200)) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:09:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xe00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:58 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1154.430055][T18496] FAULT_INJECTION: forcing a failure. [ 1154.430055][T18496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1154.485617][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1154.492393][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1154.513206][T18496] CPU: 1 PID: 18496 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1154.517352][T25465] usb 6-1: USB disconnect, device number 85 [ 1154.521953][T18496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.521956][T18496] Call Trace: [ 1154.521978][T18496] dump_stack+0x10f/0x19d [ 1154.521995][T18496] should_fail+0x23c/0x250 [ 1154.549860][T18496] __alloc_pages_nodemask+0xd8/0x380 [ 1154.555138][T18496] ? __should_failslab+0x81/0x90 [ 1154.560067][T18496] alloc_pages_current+0x21d/0x310 [ 1154.565164][T18496] __get_free_pages+0x8/0x30 [ 1154.569740][T18496] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1154.575360][T18496] kvm_mmu_load+0x7d/0x9c0 [ 1154.579852][T18496] ? check_preemption_disabled+0x51/0x140 11:09:58 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @dev={0xfe, 0x80, [], 0x38}, @rand_addr=' \x01\x00', 0x6, 0x7ff, 0x4, 0x0, 0x609, 0x400000, r4}) [ 1154.585561][T18496] ? vmx_flush_tlb_all+0x4f/0x220 [ 1154.590720][T18496] vcpu_enter_guest+0x1c74/0x2660 [ 1154.595735][T18496] vcpu_run+0x26e/0x740 [ 1154.599882][T18496] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1154.605387][T18496] kvm_vcpu_ioctl+0x565/0x950 [ 1154.610108][T18496] ? tomoyo_file_ioctl+0x1c/0x20 [ 1154.615022][T18496] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1154.620983][T18496] __se_sys_ioctl+0xcb/0x140 [ 1154.625553][T18496] __x64_sys_ioctl+0x3f/0x50 [ 1154.630137][T18496] do_syscall_64+0x39/0x80 [ 1154.634544][T18496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1154.640419][T18496] RIP: 0033:0x45de59 [ 1154.644368][T18496] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1154.663958][T18496] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.672350][T18496] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:09:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5c000000) [ 1154.680306][T18496] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1154.688262][T18496] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.696217][T18496] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 1154.704175][T18496] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:09:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfffffffffffffff, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:09:58 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='xprtrdma_mr_get\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1154.885908][T25465] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1155.265901][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1155.276940][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.288798][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.299007][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1155.312257][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1155.321548][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.330508][T25465] usb 6-1: config 0 descriptor?? [ 1155.806589][T25465] uclogic 0003:5543:0522.002B: item fetching failed at offset 0/1 [ 1155.814439][T25465] uclogic 0003:5543:0522.002B: parse failed [ 1155.829535][T25465] uclogic: probe of 0003:5543:0522.002B failed with error -22 [ 1156.008049][T25473] usb 6-1: USB disconnect, device number 86 [ 1156.785402][T25465] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1157.145696][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1157.156570][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.167837][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.177729][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1157.190774][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1157.199878][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.210001][T25465] usb 6-1: config 0 descriptor?? 11:10:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:10:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) 11:10:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1000000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000280)={0x3, 0x1, 0x3, {0x3, 0x9, 0xfffffffe, 0xffff}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$FIOCLEX(r2, 0x5451) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r3}, 0x10) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x44ce00, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000180)={@hyper}) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:01 executing program 3 (fault-call:5 fault-nth:43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:01 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = fcntl$dupfd(r4, 0x406, r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000001340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000}, 0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866030045f70000000002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xff}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x20000000000000d6, 0x7fff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80100, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = accept4(r7, &(0x7f0000000240)=@xdp, &(0x7f0000000040)=0x80, 0x40800) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x6a4685c130ff830b) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1157.472999][T18593] FAULT_INJECTION: forcing a failure. [ 1157.472999][T18593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1157.505332][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1157.508671][T18593] CPU: 1 PID: 18593 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1157.511388][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1157.519893][T18593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.519895][T18593] Call Trace: [ 1157.519919][T18593] dump_stack+0x10f/0x19d [ 1157.519931][T18593] should_fail+0x23c/0x250 [ 1157.519947][T18593] __alloc_pages_nodemask+0xd8/0x380 [ 1157.519961][T18593] alloc_pages_current+0x21d/0x310 [ 1157.519972][T18593] __get_free_pages+0x8/0x30 [ 1157.519988][T18593] kvm_mmu_topup_memory_cache+0xae/0x140 11:10:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000180)={[0x10000, 0x2000, 0x2000, 0xd004], 0x4, 0x20, 0x3ff}) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="33d62c46e6253eb29308e7a5e9918760b944d25d8780ff8e01714d7fc241fa37020a78d03b9d88d151d0143a617df3f088280e34a3c33d53162d89ce9aae763dccedf6ccdabf250dfa", 0x49}, {&(0x7f0000000300)="611bb82f4c706a7dcffc085d6daa246acfc7bf6d14032aa9dc99de6613f8eb84f0cf5de9604e06a84d7c5e08fcd968c638ca78329a8020924c4224dff545aa27", 0x40}, {&(0x7f0000000340)="292363873b8a05942e38bf0aacfe04314803b37a0fd44d28c8b9363a7de78664c9ed49e46940aab13f5ef3e3bcaa1f02410b4911c2af71529c0d864af107b465263da20581b2dfed33d1daf439042989b9c7985dceb12465ed7139e693dd69fd193eeb75733e96ee52271fe719d937d277075da6b0c97d2e11d3400ecc47ab9c4e9932f7e7c6bc6c5a58d23742404fc65168eeecd0b86366f299e4f6ee5dfea175914ba036b73c4e52a16917dcc8d7558a4be7a769693bab18fdeed8f210155170bfbbc1bf2ee5ef298490c6874123a9218f4788babe61", 0xd7}], 0x3, 0xf2, 0x5) vmsplice(r0, 0x0, 0x0, 0x0) [ 1157.561382][T25465] usb 6-1: USB disconnect, device number 87 [ 1157.563217][T18593] kvm_mmu_load+0x7d/0x9c0 [ 1157.563234][T18593] ? check_preemption_disabled+0x51/0x140 [ 1157.584828][T18593] ? vmx_flush_tlb_all+0x4f/0x220 [ 1157.589847][T18593] vcpu_enter_guest+0x1c74/0x2660 [ 1157.595005][T18593] ? emulation_required+0x67/0x940 [ 1157.600150][T18593] vcpu_run+0x26e/0x740 [ 1157.604286][T18593] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1157.609783][T18593] kvm_vcpu_ioctl+0x565/0x950 [ 1157.614454][T18593] ? tomoyo_file_ioctl+0x1c/0x20 [ 1157.619378][T18593] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1157.625249][T18593] __se_sys_ioctl+0xcb/0x140 [ 1157.629821][T18593] __x64_sys_ioctl+0x3f/0x50 [ 1157.634393][T18593] do_syscall_64+0x39/0x80 [ 1157.638798][T18593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1157.644666][T18593] RIP: 0033:0x45de59 [ 1157.648617][T18593] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:10:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1100000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa5000000) [ 1157.668197][T18593] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.676580][T18593] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1157.684524][T18593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1157.692485][T18593] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.700431][T18593] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 1157.708389][T18593] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1157.738477][T18608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1157.775958][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:02 executing program 3 (fault-call:5 fault-nth:44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:02 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='btrfs_add_block_group\x00', r0}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20080, 0x10) [ 1157.874532][T18641] FAULT_INJECTION: forcing a failure. [ 1157.874532][T18641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1157.888314][T18641] CPU: 1 PID: 18641 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1157.897005][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.907041][T18641] Call Trace: [ 1157.910318][T18641] dump_stack+0x10f/0x19d [ 1157.914631][T18641] should_fail+0x23c/0x250 [ 1157.919033][T18641] __alloc_pages_nodemask+0xd8/0x380 [ 1157.924305][T18641] alloc_pages_current+0x21d/0x310 [ 1157.929398][T18641] __get_free_pages+0x8/0x30 [ 1157.933963][T18641] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1157.939573][T18641] kvm_mmu_load+0x7d/0x9c0 [ 1157.943963][T18641] ? check_preemption_disabled+0x51/0x140 [ 1157.949720][T18641] ? vmx_flush_tlb_all+0x4f/0x220 [ 1157.954720][T18641] vcpu_enter_guest+0x1c74/0x2660 [ 1157.959801][T18641] vcpu_run+0x26e/0x740 [ 1157.963998][T18641] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1157.969491][T18641] kvm_vcpu_ioctl+0x565/0x950 [ 1157.974182][T18641] ? tomoyo_file_ioctl+0x1c/0x20 [ 1157.979185][T18641] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1157.985051][T18641] __se_sys_ioctl+0xcb/0x140 [ 1157.989617][T18641] __x64_sys_ioctl+0x3f/0x50 [ 1157.994201][T18641] do_syscall_64+0x39/0x80 [ 1157.998595][T18641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1158.004457][T18641] RIP: 0033:0x45de59 [ 1158.008339][T18641] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1158.027917][T18641] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.036346][T18641] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1158.044289][T18641] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1158.052233][T18641] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.060176][T18641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c 11:10:02 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfeff0000) [ 1158.068165][T18641] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1158.145311][T25465] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1158.505274][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1158.505296][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.505312][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.505330][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1158.505350][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1158.558581][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.567230][T25465] usb 6-1: config 0 descriptor?? [ 1159.046110][T25465] uclogic 0003:5543:0522.002C: item fetching failed at offset 0/1 [ 1159.054034][T25465] uclogic 0003:5543:0522.002C: parse failed [ 1159.060138][T25465] uclogic: probe of 0003:5543:0522.002C failed with error -22 [ 1159.248560][T25465] usb 6-1: USB disconnect, device number 88 [ 1160.025111][T25473] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1160.415146][T25473] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1160.425965][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.437525][T25473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.447545][T25473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1160.460985][T25473] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1160.470307][T25473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.479862][T25473] usb 6-1: config 0 descriptor?? 11:10:04 executing program 5: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x19, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x8c, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x8, 0x5a}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000080)=0x1000) 11:10:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1200000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 11:10:04 executing program 0: pipe(0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:04 executing program 3 (fault-call:5 fault-nth:45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:04 executing program 4: write(0xffffffffffffffff, &(0x7f0000001580)="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", 0x21b) poll(&(0x7f00000000c0)=[{}], 0x1, 0x7fff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x39b100, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x20002, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8200, 0x8) read$hidraw(r0, &(0x7f0000000340)=""/4090, 0xffa) [ 1160.611144][T18696] FAULT_INJECTION: forcing a failure. [ 1160.611144][T18696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1160.625103][T18696] CPU: 1 PID: 18696 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1160.633769][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.643822][T18696] Call Trace: [ 1160.647106][T18696] dump_stack+0x10f/0x19d [ 1160.651429][T18696] should_fail+0x23c/0x250 [ 1160.655875][T18696] __alloc_pages_nodemask+0xd8/0x380 [ 1160.661151][T18696] alloc_pages_current+0x21d/0x310 [ 1160.666320][T18696] __get_free_pages+0x8/0x30 [ 1160.670897][T18696] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1160.676524][T18696] kvm_mmu_load+0x7d/0x9c0 [ 1160.680929][T18696] ? check_preemption_disabled+0x51/0x140 [ 1160.686626][T18696] ? vmx_flush_tlb_all+0x4f/0x220 [ 1160.691733][T18696] vcpu_enter_guest+0x1c74/0x2660 [ 1160.696745][T18696] ? emulation_required+0x67/0x940 [ 1160.701848][T18696] vcpu_run+0x26e/0x740 [ 1160.705999][T18696] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1160.711446][T18696] kvm_vcpu_ioctl+0x565/0x950 [ 1160.716105][T18696] ? tomoyo_file_ioctl+0x1c/0x20 [ 1160.721028][T18696] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1160.726917][T18696] __se_sys_ioctl+0xcb/0x140 [ 1160.731576][T18696] __x64_sys_ioctl+0x3f/0x50 [ 1160.736152][T18696] do_syscall_64+0x39/0x80 [ 1160.740579][T18696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1160.746549][T18696] RIP: 0033:0x45de59 [ 1160.750424][T18696] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1160.770015][T18696] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.778412][T18696] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1160.786387][T18696] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1160.794400][T18696] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.802504][T18696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d 11:10:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2000000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x180000000) [ 1160.810472][T18696] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1160.835041][T25473] usbhid 6-1:0.0: can't add hid device: -71 [ 1160.840976][T25473] usbhid: probe of 6-1:0.0 failed with error -71 11:10:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2010000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1160.868430][T25473] usb 6-1: USB disconnect, device number 89 11:10:05 executing program 3 (fault-call:5 fault-nth:46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8001000000) 11:10:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1160.966354][T18739] FAULT_INJECTION: forcing a failure. [ 1160.966354][T18739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.011571][T18739] CPU: 1 PID: 18739 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1161.020252][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.030291][T18739] Call Trace: [ 1161.033645][T18739] dump_stack+0x10f/0x19d [ 1161.037960][T18739] should_fail+0x23c/0x250 [ 1161.042357][T18739] __alloc_pages_nodemask+0xd8/0x380 [ 1161.047629][T18739] alloc_pages_current+0x21d/0x310 [ 1161.052761][T18739] __get_free_pages+0x8/0x30 [ 1161.057337][T18739] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1161.062963][T18739] kvm_mmu_load+0x7d/0x9c0 [ 1161.067365][T18739] ? check_preemption_disabled+0x51/0x140 [ 1161.073069][T18739] ? vmx_flush_tlb_all+0x4f/0x220 [ 1161.078097][T18739] vcpu_enter_guest+0x1c74/0x2660 [ 1161.083105][T18739] ? emulation_required+0x67/0x940 [ 1161.088260][T18739] vcpu_run+0x26e/0x740 [ 1161.092406][T18739] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1161.097875][T18739] kvm_vcpu_ioctl+0x565/0x950 [ 1161.102543][T18739] ? tomoyo_file_ioctl+0x1c/0x20 [ 1161.108943][T18739] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1161.114821][T18739] __se_sys_ioctl+0xcb/0x140 [ 1161.119435][T18739] __x64_sys_ioctl+0x3f/0x50 [ 1161.124022][T18739] do_syscall_64+0x39/0x80 [ 1161.128507][T18739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1161.134377][T18739] RIP: 0033:0x45de59 [ 1161.138254][T18739] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1161.157839][T18739] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.166335][T18739] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1161.174324][T18739] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1161.182279][T18739] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.190235][T18739] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 1161.198197][T18739] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1161.414985][T25473] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1161.654987][T25473] usb 6-1: Invalid ep0 maxpacket: 64 [ 1161.804972][T25473] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1162.044932][T25473] usb 6-1: Invalid ep0 maxpacket: 64 [ 1162.050254][T25473] usb usb6-port1: attempt power cycle [ 1162.774855][T25473] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1162.867633][T25473] usb 6-1: Invalid ep0 maxpacket: 64 [ 1163.024839][T25473] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1163.125146][T25473] usb 6-1: Invalid ep0 maxpacket: 64 [ 1163.130518][T25473] usb usb6-port1: unable to enumerate USB device 11:10:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000514355220540000000000109022400010000000009040000fd03010000090700000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x55, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x2, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "e81f0cc3"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x0, 0x3}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x81, 0x8}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x97, 0x4, 0x7, 0x10, 0x1}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "a7d126af7e6e14eac8f464bbbd8532a4"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x1, 0xff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x6, 0x40, 0x4, 0xff}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3801}}, {0xd0, &(0x7f0000000180)=@string={0xd0, 0x3, "d36176ac7047a1b19f20dc4341c75576ad9fd31ac56a65e2ea17f75d000f46605255bb016b0e53186a18073804b97e3d7d8330a6b1c476f6311991d86fde0a1590c0968621d05fd84961e56c18a612ad30872c7230f8d23059004e8d918f7e4bc661e5fb9d1ec002c107f71d38d1109f001b618e2b9484eca44c5629240293c1506eec4e9272a7923992aa6e0255f6800f8234b928a201dc968dffec7a11286e0a75b57eb8921d96e0aba93eb30e01fbd27eeaf8e59e1a0304c5cdd094137bea7570b500174df5df970dbec4a6a4"}}, {0xdb, &(0x7f0000000280)=@string={0xdb, 0x3, "b9f2c714313f175986359df84f55cb3ec7f5418ec3196ae76327dde8d7c776870718f4feccd39be5f094b73dc36f8e5d8621e0178651362e497f0d3e5ce856543bff5ad6d23f11a8e89a206dac82a8c73b343ff3c6846bc6011474d6f730b5395bff374c855809137db486760b2f76d26985ef4616ab2fe3cd61bd3ad74a021d572df9604d60b4a74e4df35ca6e642cf089b4d37775c4787dbce60e2ce8936269dbcced54dbe58ddbe834ff15ca1e61743915041072dee56d923a9a7dea9282f3d44ad5bc69ffdcf4d46472f4074af305b41a75a5549b136dd"}}, {0xb8, &(0x7f0000000380)=@string={0xb8, 0x3, "5a9e305fe71e019581e4c049805f7aafaae56176b4492cb736b9e03a52af9b8a3dc96f33613986eb1f4cfc874c383892f8ed8730dde317ea810862ee0f1470c7e95a8a85b90ae50e44e3ceeee7f52656070762b6dd5406817b6c0ba0132651ae3883c242df65492bcea56f9ac5859e637438cccca875d9a4a5375c3767097ff4d034cddafea830e118ad68b2603ad9aa903583a575367240eed5d64997cda64eafd3c7ae07816f54ba4f439bebd10e39c1af8d9fceaa"}}, {0x78, &(0x7f0000000440)=@string={0x78, 0x3, "16a2690a45ba5c9473012f218e54a588ea15c03424453891ac10e73f65c590e277028d6ee0d18dc80707467321bfc7c6b72dbe379e3fae510ea486a5288469e8f358f45fc8a021615414d7b355973ec76cc3447c89ce553c4e1fe9e0088d9e1d915a1f5f96113810f6faa0ed790d5fdee2ce13000a77"}}, {0xb5, &(0x7f00000004c0)=@string={0xb5, 0x3, "7219958e4e517ecc48bbc6b1162a32ba79a4ea6d8374177e1fe67c67121da250eb90b78397dcf0e3c8a440ffed00d1e159cc4e4b001f1bfe9cc263389a1038befc57e9924b13c54de865ee2d2b94e1d9b5f0fe2c6cfa2fb75e4b33982a0f68c1c29ac97cd5469b38024f32984e78a4410a0d26de698e875b3c34ab36f4a7c68ed2a58303ce50da48ba648dfcaee876a1e9101625920a844fecb20cf691d467c7b38d5555bafcc00df1e95da037c9f995404978"}}, {0x8c, &(0x7f0000000580)=@string={0x8c, 0x3, "bce5b23b12b74d1ef2a3048d2884f205093abc97dc4a6ef1e65acfd3b6dc50ffdaa297a9bdae8c8b34fbdd720d274e91ceb3af6b120a236ca838e64b226c82b7c046ad54ca613802cedccfe7838789adbd2839b4d0093ea29470e9e2d59580bf40f7ec21f3be8487032adbc7b27c2a3e677984acc7f93ca3e56c7577cc173b6b937289a275a14afd988f"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x421}}]}) 11:10:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2500000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) 11:10:07 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x52, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000340)={0x5, {0x0, 0x7f, 0x2, 0x1}, {0x200, 0x8c29, 0x2, 0x8000}, {0x10001}}) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) vmsplice(r1, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_a, @device_a, @random="18552352572b", {0xe, 0x40}}, @ver_80211n={0x0, 0x8, 0x1, 0x0, 0x0, 0x3}}, 0x33, @val={0x8c, 0x10, {0xe1, "b30667439c5d", @short="c4239cea278a831e"}}}, 0x30) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000280)={{0x1, 0x0, @descriptor="484ba25dab140fcc"}, 0x68, 0x0, [], "801a4c1575588d816d2800f3b180aa32034257ddf1eb14c94902689453658e6417accf546677c82f7936c52d78003b3ca29f936517cc9ed210fecec8b87dd248f767f35279f2d9e22c29145ab9e8f0b51f898d8cc9bca295296fa7b0b1f461f078ea3fe4137a9fdf"}) 11:10:07 executing program 3 (fault-call:5 fault-nth:47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:07 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fff) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) read$hidraw(r0, &(0x7f0000000340)=""/4083, 0xff3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x326}, 0x9c) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0xfffffffa}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000080)) [ 1163.651207][T18780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.668085][T18778] FAULT_INJECTION: forcing a failure. [ 1163.668085][T18778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1163.696148][T18778] CPU: 0 PID: 18778 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1163.704822][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.714856][T18778] Call Trace: [ 1163.718174][T18778] dump_stack+0x10f/0x19d [ 1163.722496][T18778] should_fail+0x23c/0x250 [ 1163.726914][T18778] __alloc_pages_nodemask+0xd8/0x380 [ 1163.732205][T18778] alloc_pages_current+0x21d/0x310 [ 1163.737306][T18778] __get_free_pages+0x8/0x30 [ 1163.741883][T18778] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1163.747503][T18778] kvm_mmu_load+0x7d/0x9c0 [ 1163.751926][T18778] ? check_preemption_disabled+0x51/0x140 [ 1163.757633][T18778] ? vmx_flush_tlb_all+0x4f/0x220 [ 1163.762645][T18778] vcpu_enter_guest+0x1c74/0x2660 [ 1163.767652][T18778] ? emulation_required+0x67/0x940 [ 1163.772757][T18778] vcpu_run+0x26e/0x740 [ 1163.776979][T18778] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1163.782422][T18778] kvm_vcpu_ioctl+0x565/0x950 [ 1163.787083][T18778] ? tomoyo_file_ioctl+0x1c/0x20 [ 1163.792020][T18778] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 11:10:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) [ 1163.798004][T18778] __se_sys_ioctl+0xcb/0x140 [ 1163.802583][T18778] __x64_sys_ioctl+0x3f/0x50 [ 1163.807208][T18778] do_syscall_64+0x39/0x80 [ 1163.811615][T18778] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1163.817546][T18778] RIP: 0033:0x45de59 [ 1163.821428][T18778] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1163.841024][T18778] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:10:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30000000000000) 11:10:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4800000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1163.849435][T18778] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1163.857494][T18778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1163.865501][T18778] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.873485][T18778] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 1163.881443][T18778] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 11:10:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:08 executing program 3 (fault-call:5 fault-nth:48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1164.070182][T18836] FAULT_INJECTION: forcing a failure. [ 1164.070182][T18836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1164.083534][T18836] CPU: 1 PID: 18836 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1164.092238][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.102274][T18836] Call Trace: [ 1164.105555][T18836] dump_stack+0x10f/0x19d [ 1164.107416][T18780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1164.109882][T18836] should_fail+0x23c/0x250 [ 1164.123960][T18836] __alloc_pages_nodemask+0xd8/0x380 [ 1164.129321][T18836] alloc_pages_current+0x21d/0x310 [ 1164.134465][T18836] __get_free_pages+0x8/0x30 [ 1164.139064][T18836] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1164.144681][T18836] kvm_mmu_load+0x7d/0x9c0 [ 1164.149083][T18836] ? check_preemption_disabled+0x51/0x140 [ 1164.154785][T18836] ? vmx_flush_tlb_all+0x4f/0x220 [ 1164.159886][T18836] vcpu_enter_guest+0x1c74/0x2660 [ 1164.164938][T18836] ? emulation_required+0x67/0x940 [ 1164.170037][T18836] vcpu_run+0x26e/0x740 [ 1164.174185][T18836] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1164.179624][T18836] kvm_vcpu_ioctl+0x565/0x950 [ 1164.184307][T18836] ? tomoyo_file_ioctl+0x1c/0x20 [ 1164.189282][T18836] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1164.195211][T18836] __se_sys_ioctl+0xcb/0x140 [ 1164.199790][T18836] __x64_sys_ioctl+0x3f/0x50 [ 1164.204399][T18836] do_syscall_64+0x39/0x80 [ 1164.208897][T18836] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1164.214768][T18836] RIP: 0033:0x45de59 [ 1164.218649][T18836] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1164.238241][T18836] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.244766][T25465] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1164.246709][T18836] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1164.262167][T18836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1164.270127][T18836] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.278084][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 1164.286044][T18836] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1164.514689][T25465] usb 6-1: device descriptor read/64, error 18 [ 1164.904682][T25465] usb 6-1: device descriptor read/64, error 18 [ 1165.174644][T25465] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1165.444640][T25465] usb 6-1: device descriptor read/64, error 18 [ 1165.834591][T25465] usb 6-1: device descriptor read/64, error 18 [ 1165.954591][T25465] usb usb6-port1: attempt power cycle 11:10:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 11:10:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:10:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5c00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:10 executing program 0: pipe(&(0x7f0000000400)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0xd) 11:10:10 executing program 3 (fault-call:5 fault-nth:49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:10 executing program 4: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000), 0x4) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) open_by_handle_at(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x7, 0xfffffffffffffc01, 0x4, 0x80000001, 0xffff, 0x7fff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) read$hidraw(r2, &(0x7f0000000340)=""/4096, 0x1000) [ 1166.668581][T25465] usb 6-1: new high-speed USB device number 96 using dummy_hcd 11:10:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 1166.735119][T18864] FAULT_INJECTION: forcing a failure. [ 1166.735119][T18864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1166.758489][T18864] CPU: 0 PID: 18864 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1166.767164][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.777194][T18864] Call Trace: [ 1166.780499][T18864] dump_stack+0x10f/0x19d [ 1166.784893][T18864] should_fail+0x23c/0x250 [ 1166.789294][T18864] __alloc_pages_nodemask+0xd8/0x380 [ 1166.794611][T18864] alloc_pages_current+0x21d/0x310 [ 1166.799809][T18864] __get_free_pages+0x8/0x30 [ 1166.804413][T18864] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1166.810103][T18864] kvm_mmu_load+0x7d/0x9c0 [ 1166.814495][T18864] ? check_preemption_disabled+0x51/0x140 [ 1166.820185][T18864] ? vmx_flush_tlb_all+0x4f/0x220 [ 1166.825226][T18864] vcpu_enter_guest+0x1c74/0x2660 [ 1166.830225][T18864] ? emulation_required+0x67/0x940 [ 1166.835315][T18864] vcpu_run+0x26e/0x740 [ 1166.839450][T18864] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1166.844945][T18864] kvm_vcpu_ioctl+0x565/0x950 [ 1166.849600][T18864] ? tomoyo_file_ioctl+0x1c/0x20 [ 1166.854515][T18864] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1166.860385][T18864] __se_sys_ioctl+0xcb/0x140 [ 1166.864954][T18864] __x64_sys_ioctl+0x3f/0x50 [ 1166.869520][T18864] do_syscall_64+0x39/0x80 [ 1166.873911][T18864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.879775][T18864] RIP: 0033:0x45de59 [ 1166.883735][T18864] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1166.903320][T18864] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.911830][T18864] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1166.919773][T18864] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1166.927787][T18864] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 11:10:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1166.935733][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 1166.943688][T18864] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 11:10:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6800000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xffff, 0x4) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001500010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xac0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 11:10:11 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x42, 0x0, 0x41000, 0x0, [], 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffd1}, 0x78) vmsplice(r1, 0x0, 0x0, 0x0) [ 1167.194442][T25465] usb 6-1: device not accepting address 96, error -71 [ 1167.574423][T25465] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1167.804521][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1167.815365][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.827041][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.837155][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1167.850470][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1167.859751][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.868727][T25465] usb 6-1: config 0 descriptor?? [ 1168.355410][T25465] uclogic 0003:5543:0522.002D: item fetching failed at offset 0/1 [ 1168.363336][T25465] uclogic 0003:5543:0522.002D: parse failed [ 1168.378360][T25465] uclogic: probe of 0003:5543:0522.002D failed with error -22 [ 1168.557069][T25472] usb 6-1: USB disconnect, device number 97 [ 1169.344275][T25465] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1169.744264][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1169.755096][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.766047][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.775960][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1169.789027][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1169.798094][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.806772][T25465] usb 6-1: config 0 descriptor?? 11:10:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355355234915d67ed7a09022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:10:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6c00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:14 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1ff, 0x3, [0x401, 0x1, 0x7]}, &(0x7f0000000180)=0xe) 11:10:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 11:10:14 executing program 3 (fault-call:5 fault-nth:50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:14 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) recvmmsg(r0, &(0x7f00000075c0)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000001340)=""/6, 0x6}, {&(0x7f0000001380)=""/7, 0x7}, {&(0x7f00000013c0)=""/60, 0x3c}, {&(0x7f0000001400)=""/50, 0x32}, {&(0x7f0000001440)=""/167, 0xa7}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/42, 0x2a}, {&(0x7f00000025c0)=""/28, 0x1c}], 0xa, &(0x7f00000026c0)=""/240, 0xf0}, 0x3}, {{&(0x7f00000027c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000002840)=""/247, 0xf7}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/201, 0xc9}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/204, 0xcc}, {&(0x7f0000004b40)=""/225, 0xe1}, {&(0x7f0000004c40)=""/67, 0x43}], 0x7, &(0x7f0000004d40)}, 0x1}, {{&(0x7f0000004d80)=@nfc, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e00)=""/203, 0xcb}, {&(0x7f0000004f00)=""/47, 0x2f}, {&(0x7f0000004f40)=""/38, 0x26}, {&(0x7f0000004f80)=""/52, 0x34}, {&(0x7f0000004fc0)=""/25, 0x19}, {&(0x7f0000005000)=""/51, 0x33}], 0x6, &(0x7f00000050c0)}, 0x2}, {{&(0x7f0000005100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005180)=""/136, 0x88}, {&(0x7f0000005240)=""/204, 0xcc}, {&(0x7f0000005340)=""/208, 0xd0}, {&(0x7f0000005440)=""/180, 0xb4}, {&(0x7f0000005500)=""/218, 0xda}, {&(0x7f0000005600)=""/200, 0xc8}, {&(0x7f0000005700)=""/62, 0x3e}], 0x7, &(0x7f00000057c0)=""/46, 0x2e}, 0x401}, {{&(0x7f0000005800)=@ethernet={0x0, @random}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005880)=""/151, 0x97}, {&(0x7f0000005940)=""/11, 0xb}, {&(0x7f0000005980)=""/198, 0xc6}, {&(0x7f0000005a80)=""/47, 0x2f}, {&(0x7f0000005ac0)=""/134, 0x86}, {&(0x7f0000005b80)=""/40, 0x28}, {&(0x7f0000005bc0)=""/9, 0x9}, {&(0x7f0000005c00)=""/15, 0xf}, {&(0x7f0000005c40)=""/241, 0xf1}], 0x9, &(0x7f0000005e00)=""/208, 0xd0}, 0x4}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/82, 0x52}, {&(0x7f0000006f80)=""/159, 0x9f}, {&(0x7f0000007040)=""/39, 0x27}], 0x4, &(0x7f00000070c0)=""/193, 0xc1}, 0x6654}, {{&(0x7f00000071c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007480)=[{&(0x7f0000007240)=""/102, 0x66}, {&(0x7f00000072c0)=""/250, 0xfa}, {&(0x7f00000073c0)=""/63, 0x3f}, {&(0x7f0000007400)=""/16, 0x10}, {&(0x7f0000007440)=""/31, 0x1f}], 0x5, &(0x7f0000007500)=""/185, 0xb9}, 0x470}], 0x7, 0x40, &(0x7f0000007780)={0x77359400}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000050c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000007840)=0x1) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000040)={0x3d, ""/61}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x120) r3 = socket$inet_smc(0x2b, 0x1, 0x0) stat(&(0x7f0000004d40)='./file0\x00', &(0x7f00000077c0)) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x8, @broadcast, 0x4e24, 0x3, 'rr\x00', 0x27, 0x5, 0x65}, 0x2c) 11:10:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x7400000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x7a00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1169.935044][T18962] FAULT_INJECTION: forcing a failure. [ 1169.935044][T18962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1169.954214][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1169.960189][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1169.982387][T25465] usb 6-1: USB disconnect, device number 98 [ 1169.989486][T18962] CPU: 0 PID: 18962 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1169.998145][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.008192][T18962] Call Trace: [ 1170.011462][T18962] dump_stack+0x10f/0x19d [ 1170.015768][T18962] should_fail+0x23c/0x250 [ 1170.020161][T18962] __alloc_pages_nodemask+0xd8/0x380 [ 1170.025432][T18962] alloc_pages_current+0x21d/0x310 [ 1170.030559][T18962] __get_free_pages+0x8/0x30 [ 1170.035123][T18962] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1170.040726][T18962] kvm_mmu_load+0x7d/0x9c0 [ 1170.045116][T18962] ? check_preemption_disabled+0x51/0x140 [ 1170.050911][T18962] ? vmx_flush_tlb_all+0x4f/0x220 [ 1170.055978][T18962] vcpu_enter_guest+0x1c74/0x2660 [ 1170.060975][T18962] ? emulation_required+0x67/0x940 [ 1170.066111][T18962] vcpu_run+0x26e/0x740 [ 1170.070284][T18962] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1170.075718][T18962] kvm_vcpu_ioctl+0x565/0x950 [ 1170.080384][T18962] ? tomoyo_file_ioctl+0x1c/0x20 [ 1170.085309][T18962] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1170.091175][T18962] __se_sys_ioctl+0xcb/0x140 [ 1170.095741][T18962] __x64_sys_ioctl+0x3f/0x50 [ 1170.100311][T18962] do_syscall_64+0x39/0x80 [ 1170.104705][T18962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1170.110567][T18962] RIP: 0033:0x45de59 [ 1170.114440][T18962] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.134028][T18962] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.142482][T18962] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1170.150428][T18962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1170.158373][T18962] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.166316][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 1170.174261][T18962] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:14 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000048421e3eb0eb7c55ec30b70002000000103583f42e5a2d6de933ec428bd84864781ee31d5fa486dfea093fa102e6470300000000f484c83ed625bff98007cd1ac1638cf6700d5fc9012d82456ba71370b4bbf2cfab4ba45fae255f07050d8128655a3c2fb405ff5ce7d8b619e2aee4b39da9bedad6df216e43dc5db70b69e83e2b279e2bab86863e069be5fe7899837ae60e62e0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe30}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000340)={0x1e6, 0x803, 0x1f, "13b996518e3336d215667c17fd0b12305a2f628648d01e8f606f88d96fde09437f0697f55626114e2f859eb853396eed73003fb070eae4a1e2aa52e9", 0x30, "95f966355549f19e46922e1e5789eed50d9c97b3288e0d88826bcd51e11bdea94db4a0c3502cdd50cfbad5cf38d36bef528ef7df31225c0f12b24fd3", 0x10}) vmsplice(r1, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) 11:10:14 executing program 3 (fault-call:5 fault-nth:51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1170.198653][T18981] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20004 11:10:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 11:10:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x8cffffff00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1170.291825][T18996] FAULT_INJECTION: forcing a failure. [ 1170.291825][T18996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.321476][T18996] CPU: 1 PID: 18996 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1170.330177][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.340387][T18996] Call Trace: [ 1170.343717][T18996] dump_stack+0x10f/0x19d [ 1170.348034][T18996] should_fail+0x23c/0x250 [ 1170.352441][T18996] __alloc_pages_nodemask+0xd8/0x380 [ 1170.357722][T18996] alloc_pages_current+0x21d/0x310 [ 1170.362971][T18996] __get_free_pages+0x8/0x30 [ 1170.367548][T18996] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1170.373223][T18996] kvm_mmu_load+0x7d/0x9c0 [ 1170.377626][T18996] ? check_preemption_disabled+0x51/0x140 [ 1170.383397][T18996] ? vmx_flush_tlb_all+0x4f/0x220 [ 1170.388403][T18996] vcpu_enter_guest+0x1c74/0x2660 [ 1170.393414][T18996] ? emulation_required+0x67/0x940 [ 1170.398522][T18996] vcpu_run+0x26e/0x740 [ 1170.402667][T18996] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1170.408137][T18996] kvm_vcpu_ioctl+0x565/0x950 [ 1170.412809][T18996] ? tomoyo_file_ioctl+0x1c/0x20 [ 1170.417732][T18996] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1170.423607][T18996] __se_sys_ioctl+0xcb/0x140 [ 1170.428185][T18996] __x64_sys_ioctl+0x3f/0x50 [ 1170.432793][T18996] do_syscall_64+0x39/0x80 [ 1170.437198][T18996] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1170.443073][T18996] RIP: 0033:0x45de59 [ 1170.448130][T18996] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.467721][T18996] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.476132][T18996] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1170.484134][T18996] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1170.492101][T18996] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.500071][T18996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000033 [ 1170.508024][T18996] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1170.754188][T25465] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1171.054228][T25465] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 1171.134544][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.145340][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.156494][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.166324][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.284632][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.295450][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.307131][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.317363][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.424380][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.435185][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.446589][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.456727][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.554308][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.565132][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.576647][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.586892][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.684099][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.694889][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.705853][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.715743][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.804093][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.814964][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.826511][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.836356][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.934249][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.946114][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.957042][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.966953][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1172.064343][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1172.075187][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.086776][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.096914][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1172.285628][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=5235, bcdDevice=91.34 [ 1172.294669][T25465] usb 6-1: New USB device strings: Mfr=93, Product=103, SerialNumber=237 [ 1172.303089][T25465] usb 6-1: Product: syz [ 1172.307267][T25465] usb 6-1: Manufacturer: syz [ 1172.311854][T25465] usb 6-1: SerialNumber: syz [ 1172.318775][T25465] usb 6-1: config 0 descriptor?? [ 1172.733971][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1172.740119][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1172.747819][T25465] usb 6-1: USB disconnect, device number 99 [ 1173.373957][T25472] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1173.665108][T25472] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 1173.764250][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1173.775075][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.786586][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.796738][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1173.884224][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1173.895011][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.906670][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.916731][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 11:10:18 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x10010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x7fffffff, 0x7, 0x6, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5562}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x8c28]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x13ec}]}, 0x50}}, 0x800) 11:10:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xf6ffffff00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:18 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="188019"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x8, 0x3, 0x0, 0x6, 0x400, 0xe4f3}, 0x20) vmsplice(r1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x0, 0xe8f3}) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000280)="ed6518f486cd96f132febb4bcf71feb75ac261d4cad8de9e0f1ce84b6ab7d4f839958a1b4f6ff29a81e6fd9f28603f358fe00cf700e1fac80669b9115d1c972744417e632b6ad0aa4d4d3a6fef8ce6e15eee74d8df9f204bf5426b33c03717dba26edc706f4e8c5d30adadcfbb283caf25a37c361a534c1602b6859c9766895c849222db73ae8172f8c2bdfbbccc76a43d5feab4d7", 0x95) 11:10:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 11:10:18 executing program 3 (fault-call:5 fault-nth:52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) r5 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80400) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) poll(&(0x7f0000002380)=[{r1, 0x2}, {r2, 0x20}, {r3}, {r4, 0x10}, {r5, 0x3008}, {r6, 0x100}], 0x6, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:18 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000018b6e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 11:10:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xf9fdffff00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1174.065264][T25472] usb 6-1: unable to read config index 2 descriptor/all [ 1174.071343][T19044] FAULT_INJECTION: forcing a failure. [ 1174.071343][T19044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.072652][T25472] usb 6-1: can't read configurations, error -71 11:10:18 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000280)={0x3, {{0xa, 0x4e21, 0x101, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffff9}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x4}}}, 0x108) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000010000100947bb99570ec7536fdd7e9b76f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) [ 1174.150765][T19044] CPU: 0 PID: 19044 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1174.159443][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.169592][T19044] Call Trace: [ 1174.172909][T19044] dump_stack+0x10f/0x19d [ 1174.177226][T19044] should_fail+0x23c/0x250 [ 1174.181692][T19044] __alloc_pages_nodemask+0xd8/0x380 [ 1174.186961][T19044] alloc_pages_current+0x21d/0x310 [ 1174.192061][T19044] __get_free_pages+0x8/0x30 11:10:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xfeffffff00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1174.196630][T19044] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1174.202250][T19044] kvm_mmu_load+0x7d/0x9c0 [ 1174.206661][T19044] ? check_preemption_disabled+0x51/0x140 [ 1174.212364][T19044] ? vmx_flush_tlb_all+0x4f/0x220 [ 1174.217380][T19044] vcpu_enter_guest+0x1c74/0x2660 [ 1174.222394][T19044] vcpu_run+0x26e/0x740 [ 1174.226546][T19044] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1174.231992][T19044] kvm_vcpu_ioctl+0x565/0x950 [ 1174.236664][T19044] ? tomoyo_file_ioctl+0x1c/0x20 [ 1174.241599][T19044] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1174.247479][T19044] __se_sys_ioctl+0xcb/0x140 [ 1174.252061][T19044] __x64_sys_ioctl+0x3f/0x50 [ 1174.256647][T19044] do_syscall_64+0x39/0x80 [ 1174.261061][T19044] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1174.266948][T19044] RIP: 0033:0x45de59 [ 1174.270830][T19044] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1174.290467][T19044] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.298860][T19044] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1174.306814][T19044] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1174.314777][T19044] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.322749][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000034 [ 1174.330732][T19044] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:18 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000080)={0x2, 0x2, @raw_data=[0x80000001, 0x5, 0xfffffffc, 0xfffffff6, 0x8, 0x6, 0x24f, 0x4, 0x0, 0x1000, 0x1c3, 0x2, 0x0, 0x31, 0x5, 0x6]}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000040)) 11:10:18 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x4, 0x4, 0x7f, 0x40007, 0x20, @local, @local, 0x7800, 0x80, 0xff}}) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xff00000000000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 11:10:18 executing program 3 (fault-call:5 fault-nth:53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1174.678817][T19118] FAULT_INJECTION: forcing a failure. [ 1174.678817][T19118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.708725][T19118] CPU: 0 PID: 19118 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1174.717532][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.727714][T19118] Call Trace: [ 1174.731003][T19118] dump_stack+0x10f/0x19d [ 1174.735325][T19118] should_fail+0x23c/0x250 [ 1174.739760][T19118] __alloc_pages_nodemask+0xd8/0x380 [ 1174.745047][T19118] alloc_pages_current+0x21d/0x310 [ 1174.750150][T19118] __get_free_pages+0x8/0x30 [ 1174.754739][T19118] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1174.760357][T19118] kvm_mmu_load+0x7d/0x9c0 [ 1174.764757][T19118] ? check_preemption_disabled+0x51/0x140 [ 1174.770459][T19118] ? vmx_flush_tlb_all+0x4f/0x220 [ 1174.775509][T19118] vcpu_enter_guest+0x1c74/0x2660 [ 1174.780536][T19118] vcpu_run+0x26e/0x740 [ 1174.784684][T19118] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1174.790214][T19118] kvm_vcpu_ioctl+0x565/0x950 [ 1174.794883][T19118] ? tomoyo_file_ioctl+0x1c/0x20 [ 1174.799811][T19118] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1174.805754][T19118] __se_sys_ioctl+0xcb/0x140 [ 1174.810338][T19118] __x64_sys_ioctl+0x3f/0x50 [ 1174.814917][T19118] do_syscall_64+0x39/0x80 [ 1174.819832][T19118] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1174.825706][T19118] RIP: 0033:0x45de59 [ 1174.829583][T19118] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1174.849270][T19118] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.857677][T19118] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1174.865637][T19118] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1174.873631][T19118] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.881593][T19118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000035 [ 1174.889610][T19118] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000) 11:10:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xffffff7f00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:19 executing program 3 (fault-call:5 fault-nth:54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:19 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40600, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg(r1, &(0x7f0000000200)={&(0x7f00000013c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x3, 0x0, {0xa, 0x4e21, 0x5, @mcast2, 0x3}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001440)="1de39217b9d7a7d59fbcdd52c51453c68e7f7e0e58f09ae8eb5125b8955d31d5d94c78227f98df520516fb0ec2f523408800934f62f7126d075992e187c41dc984c3e487481d70822668cbba737576a2b34567ede967fbfe9f3e3dceac616364eed3e344802e1c6c79e9617827721455268c73d6f5ae07b9b0a71bdd682dd97b1db4a1ffde2bce674e5b92c8d2bc9f0ce8c7f507da4766278b39b8ff9290fc3395f464af8083cf801c984e16911d0f02015dbcd93acf7307cb23aee300faf1fbc0c67b66296fae8734395ef22d28cc36c397ffc2e22d918cf6953c4c", 0xdc}, {&(0x7f0000001540)="3eed741a6aabb6e1959cfaeafadc073d1db0fb7c23e52d51de3de1aa025276a968a6ded489ddb531bf19bbea5fdb389de8589b3f3b2ee3668450da7c8ab94860daa354404bb1bbe48d335c43e58c97d5f09cb2f39ee25de7e81c05352e0460d1b17fd70d5f0878ad2d87d09b798aa5ad54b38bbd2bce274421a3f1e3945334bbaaf1832e6cafaf966ac63ef4ebb0c0a99d230dc549ac4434b43158fe9340080cbe6d0076eef30decdbcd5cd33a9b3a1fdb04e3265a6ed497bafa55ebb3c4cc9fc6d61cc21aa5ccc3cebb0b4c9cda28c502121abe784eae67c09202964cea3808ef4a5121ca26321acf2fa5", 0xeb}, {&(0x7f0000001640)="c7d714cf508391525c3a35ae2d47b09eed909ef7082942c2929e92b74e9cf7ba7fe5f37d9da05197b4ceb1b05e204c23d40d21290092f9730414217beb81ac6dcfc0cf54e6c355a2744fc4df51cb69e8e7ac3a53b13e0d79", 0x58}, {&(0x7f00000016c0)="75ffda072dc0031311a2332d54e33f661e2aa4c437e184af9ff37306062125e3b6a70befe47f7da9cbb8d2bd107c9490513fc161f6c882cb3746a2760275fce3de8044a9a9a7fb4a2a6f92865c4a9782bb", 0x51}, {&(0x7f0000001740)="48e19683ea9c3044e28c973acb2c67c189644894be004fd9e6057af4355f3d5bfeb803a49fe86a6e78df56bd23c60f5e283a6e520b3e09ab82a1ca620df9d9f9fd3e8db3d6f55e3ea76a1be1aaf47bbebffe8d2f7cbe2817782deccb764a828d163242f5c9714f62bd21c3899041f6196d3efa7965ec10048a28b92acc6f4e2e88b7b27ae7e24c21d5", 0x89}], 0x5, &(0x7f0000001880)=[{0xe0, 0x1, 0x800, "c9e70bdf452acf81a65ecb8195cf4cedc550fc84fe3e44f992b41d70d25273203a0b1d6ae6b14ba54f18fef0872b0cdfe43678dc61092481cb75ff34ab1c16583357ff63c561a95e668ee823889f42af72413bae4c3c9e9d9a94b0db677781d15a69fa4cbe5a0bfef209819e9e6abb434141d8cadffed183211dd23235dd3b13a1ca75b43f005b6b225a16c86ccc605852933202c4d0d9c800ab0db72f5c143995bc00f9af065a6393e3e560d63aabb95a180b91a102e48ab9a7dcb1c19b3e0b82dc1e4c39a988bbc6cbbcfb30"}, {0x98, 0x107, 0x1, "1dc7360d46d8efcbbe3754dcbdde7bf4bae60c05d1952706b5d04df77535190c28574eb9c494a55b9ad03d27c7ede14b5fea73222261a0b10000e4b63b846a1428487e739ad118609f49ff85aab246efe2e623531579fb9536b3d99ed5b882a90624350c7c8d287da493b2e8293b81554755d99629353d16895c47797b4f460e172e265d"}, {0x10, 0x0, 0x1f}, {0x10, 0x109, 0x1f}, {0x30, 0x104, 0x2, "9240d298102681a8f6f483c30965a5cc7226a9e34134c7ae2c5b4bf0"}, {0xe8, 0xff, 0x2, "e72484418631cf90837745fdd2d316ae92a0de7af4b0030a8e2d0fd068c00703f19ac77c988b2d6b4f2ac64df2df21971917e979a06a111f0f607bfc7fcc9221a05a3e1965a582d6cbdaac2e435e449d8d12ff83edd91cf4545f11109fd289579bb0056f0f120a66e40190baf3e40304eb1ed2bc689f0b5e77a39ee089b82a2decaf2d8506f72b5a8a743c0c217b1dc00d8815eca8605c21e19cb8018900205f6c046b4507b131bdd6aff35eda4a520bc89d3228b033c07a2de8150f0e0be0716827bfa51ec8b576f9a7f30c563aba352046055a"}, {0xb8, 0x1, 0x401, "20983eb151bde5a4be4db17c479f5d090019058e7e64da788e3c011799342a738d04aa56ced3c38c81c3edfcb2109670c0e023cb63415edebc7ea32d80a8de5e3985f2a20d8c2dcc7a8bac0249dcbc79c54e1bac4a3e8260a3880581eb0ccd57ead40b8d6c35d7cc475cd81f2654a21e0ff22da62ee3830a09437cf3009e87c105de516d00dab4354bbb582ca1632c51075499ccb14295c32bf9fe67e02337587b"}, {0xb8, 0x109, 0x4, "de9037a6d7770924bf6168d14c2bd8dfb2729ccb6791e062466826b231e0083ed16e57e23a84512f087f779b4499b9751a8f32908a1374101d339c4f49b6c00e0bc427a3ab29b9461034e994790b6cf583babbcbf84c4927f75c8fb7309ced367999a456f024c99e62e75d3973cd3bf1452f2fc9988b56615b68158d0fb6a4c55e5e12af79ba9c1cd87c2b10cdd977a811beb82c96886767a7123245ea84417907fb3b172b"}], 0x420}, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048000) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4800) write$FUSE_ATTR(r7, &(0x7f0000001340)={0x78, 0xfffffffffffffffe, 0x0, {0x5, 0x79, 0x0, {0x1, 0x9, 0x6, 0x800, 0x35, 0x4, 0xfff, 0x9c, 0x27f1, 0xc000, 0x4, 0x0, 0xffffffffffffffff, 0x40, 0x4}}}, 0x78) bind$packet(r7, &(0x7f0000000280)={0x11, 0xf5, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) syz_init_net_socket$llc(0x1a, 0x5, 0x0) 11:10:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xffffffff00000000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:19 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000aa0f85dd53457ac21000010095b04e685422c2663ad1b14ba558eb7164db8e5dfbdd1b122d2340ba6afc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) [ 1175.095746][T19150] FAULT_INJECTION: forcing a failure. [ 1175.095746][T19150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1175.109649][T19150] CPU: 1 PID: 19150 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1175.118313][T19150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.128397][T19150] Call Trace: [ 1175.131679][T19150] dump_stack+0x10f/0x19d [ 1175.135991][T19150] should_fail+0x23c/0x250 [ 1175.140395][T19150] __alloc_pages_nodemask+0xd8/0x380 [ 1175.145728][T19150] alloc_pages_current+0x21d/0x310 [ 1175.150828][T19150] __get_free_pages+0x8/0x30 [ 1175.155407][T19150] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1175.161037][T19150] kvm_mmu_load+0x7d/0x9c0 [ 1175.165438][T19150] ? check_preemption_disabled+0x51/0x140 [ 1175.171139][T19150] ? vmx_flush_tlb_all+0x4f/0x220 [ 1175.176150][T19150] vcpu_enter_guest+0x1c74/0x2660 [ 1175.181218][T19150] ? emulation_required+0x67/0x940 [ 1175.186317][T19150] vcpu_run+0x26e/0x740 [ 1175.190459][T19150] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1175.195947][T19150] kvm_vcpu_ioctl+0x565/0x950 [ 1175.200696][T19150] ? tomoyo_file_ioctl+0x1c/0x20 [ 1175.205622][T19150] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1175.211498][T19150] __se_sys_ioctl+0xcb/0x140 [ 1175.216102][T19150] __x64_sys_ioctl+0x3f/0x50 [ 1175.220732][T19150] do_syscall_64+0x39/0x80 [ 1175.225145][T19150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1175.231018][T19150] RIP: 0033:0x45de59 [ 1175.234906][T19150] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1175.254561][T19150] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.262959][T19150] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1175.270916][T19150] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1175.278923][T19150] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.286933][T19150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 1175.294891][T19150] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404355220540000000000109022400010000000009040000fd0301000009217dd3cef3a8c7c7b5a5e4ee61764d0000000122010003fb47671dbbd0a900"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2b12aa287526bba58722c98d5e7bf2f827708908826bbbaa42722eeeb0cd2233a60c752945c2857c5d996c968038f504ddcf7f867a915c5cf3f921facb65fd943869c4f751de423e2ac6ce596ef5b414b339105f87ccb159e413364ca44bce9b37d2639696c4c83250f031edac0e0435eb46e25c6f27c6646fe4aab106120b3f5d7f7bd2020bd6b3fd1750163eaf2861d121ad5485eb4887edb462ed8cb448d936c81a8505734c72a68de18d06ca3ff100e1c7613fe13c7d584969cc1b25267b576de5e1e35f80b5d4ab66dae2d6a15c00e90bc2bc1199bdc08e715b2b654df388adc6ce"], 0x0}, 0x0) 11:10:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 11:10:19 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x0, 0x8, 0x6, [], 0xffffffffffffffff}) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000040), 0x4) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xffffffffffffff0f, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:19 executing program 3 (fault-call:5 fault-nth:55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:19 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004b911165e02e0000009563f25a16f937d8093c014a1ebd8e47910caa81b8fbbf9a1ff6d3f358a9f197dd3da49543e295e89b0551298e085e6ed16ef21470bd0dbf77ae995fe5755fda82b7615c7606000000e156bf65"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) 11:10:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) [ 1175.450502][T19177] FAULT_INJECTION: forcing a failure. [ 1175.450502][T19177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1175.481147][T19177] CPU: 0 PID: 19177 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1175.489831][T19177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:10:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x8, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1175.499869][T19177] Call Trace: [ 1175.503152][T19177] dump_stack+0x10f/0x19d [ 1175.507469][T19177] should_fail+0x23c/0x250 [ 1175.511879][T19177] __alloc_pages_nodemask+0xd8/0x380 [ 1175.517165][T19177] alloc_pages_current+0x21d/0x310 [ 1175.522266][T19177] __get_free_pages+0x8/0x30 [ 1175.526844][T19177] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1175.532464][T19177] kvm_mmu_load+0x7d/0x9c0 [ 1175.536866][T19177] ? check_preemption_disabled+0x51/0x140 [ 1175.542571][T19177] ? vmx_flush_tlb_all+0x4f/0x220 [ 1175.547576][T19177] vcpu_enter_guest+0x1c74/0x2660 [ 1175.552575][T19177] ? emulation_required+0x67/0x940 [ 1175.557662][T19177] vcpu_run+0x26e/0x740 [ 1175.561857][T19177] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1175.567305][T19177] kvm_vcpu_ioctl+0x565/0x950 [ 1175.571972][T19177] ? tomoyo_file_ioctl+0x1c/0x20 [ 1175.577041][T19177] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1175.582927][T19177] __se_sys_ioctl+0xcb/0x140 [ 1175.587503][T19177] __x64_sys_ioctl+0x3f/0x50 [ 1175.592082][T19177] do_syscall_64+0x39/0x80 11:10:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) [ 1175.596522][T19177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1175.602500][T19177] RIP: 0033:0x45de59 [ 1175.606389][T19177] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1175.626190][T19177] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.634590][T19177] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1175.642556][T19177] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1175.650513][T19177] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.658497][T19177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 1175.666455][T19177] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x8, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:20 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001000010095d3e3ccbd9ee40df1f6b3f33e037331d5cda7a9df95584004f26d632e4036a2c570e332004bc24a66dcdac477c0d7e67d76ecaf1fbaa15e8184322b3bf871468ca3819db6a8516954cf50a1e1d81cd187"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff89) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1175.853670][T10115] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1175.917578][T19224] fuse: Unknown parameter 'rootmode00000000000000000040000' [ 1176.233698][T10115] usb 6-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 1176.244062][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1176.255552][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1176.268638][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1176.277869][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.286666][T10115] usb 6-1: config 0 descriptor?? [ 1176.336318][T10115] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 11:10:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x48049) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:10:22 executing program 3 (fault-call:5 fault-nth:56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 11:10:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:22 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80800) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000001c0)) r4 = pidfd_getfd(r0, r1, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) 11:10:22 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000000)) [ 1178.415655][T25474] usb 6-1: USB disconnect, device number 102 11:10:22 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000bd43ad07b882010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "9ccd7b551d368f4fd9361d01b076002893bbee2b183e56fa275bcd899254929b", 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1178.487083][T19255] fuse: Invalid rootmode [ 1178.499100][T19256] FAULT_INJECTION: forcing a failure. [ 1178.499100][T19256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.540225][T19256] CPU: 1 PID: 19256 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1178.548922][T19256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.558958][T19256] Call Trace: [ 1178.562242][T19256] dump_stack+0x10f/0x19d [ 1178.566559][T19256] should_fail+0x23c/0x250 [ 1178.570963][T19256] __alloc_pages_nodemask+0xd8/0x380 [ 1178.576312][T19256] alloc_pages_current+0x21d/0x310 [ 1178.581482][T19256] __get_free_pages+0x8/0x30 [ 1178.586063][T19256] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1178.591696][T19256] kvm_mmu_load+0x7d/0x9c0 [ 1178.596105][T19256] ? check_preemption_disabled+0x51/0x140 [ 1178.601810][T19256] ? vmx_flush_tlb_all+0x4f/0x220 [ 1178.606826][T19256] vcpu_enter_guest+0x1c74/0x2660 [ 1178.611909][T19256] ? emulation_required+0x67/0x940 [ 1178.617014][T19256] vcpu_run+0x26e/0x740 [ 1178.621156][T19256] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1178.626600][T19256] kvm_vcpu_ioctl+0x565/0x950 [ 1178.631329][T19256] ? tomoyo_file_ioctl+0x1c/0x20 [ 1178.636305][T19256] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1178.642258][T19256] __se_sys_ioctl+0xcb/0x140 [ 1178.646838][T19256] __x64_sys_ioctl+0x3f/0x50 [ 1178.651416][T19256] do_syscall_64+0x39/0x80 [ 1178.655820][T19256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1178.661753][T19256] RIP: 0033:0x45de59 [ 1178.665631][T19256] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:10:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x900}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 11:10:22 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0xba587fba}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1178.685211][T19256] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.693596][T19256] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1178.701592][T19256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1178.709535][T19256] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.717516][T19256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 1178.725462][T19256] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:22 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:22 executing program 3 (fault-call:5 fault-nth:57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1178.831297][T19288] fuse: Invalid rootmode [ 1178.851996][T19297] FAULT_INJECTION: forcing a failure. [ 1178.851996][T19297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.868541][T19297] CPU: 1 PID: 19297 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1178.877203][T19297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.887319][T19297] Call Trace: [ 1178.890588][T19297] dump_stack+0x10f/0x19d [ 1178.894894][T19297] should_fail+0x23c/0x250 [ 1178.899284][T19297] __alloc_pages_nodemask+0xd8/0x380 [ 1178.904595][T19297] alloc_pages_current+0x21d/0x310 [ 1178.909680][T19297] __get_free_pages+0x8/0x30 [ 1178.914245][T19297] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1178.919927][T19297] kvm_mmu_load+0x7d/0x9c0 [ 1178.924318][T19297] ? check_preemption_disabled+0x51/0x140 [ 1178.930020][T19297] ? vmx_flush_tlb_all+0x4f/0x220 [ 1178.935018][T19297] vcpu_enter_guest+0x1c74/0x2660 [ 1178.940078][T19297] ? emulation_required+0x67/0x940 [ 1178.945165][T19297] vcpu_run+0x26e/0x740 [ 1178.949323][T19297] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1178.954811][T19297] kvm_vcpu_ioctl+0x565/0x950 [ 1178.959462][T19297] ? tomoyo_file_ioctl+0x1c/0x20 [ 1178.964395][T19297] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1178.970260][T19297] __se_sys_ioctl+0xcb/0x140 [ 1178.974830][T19297] __x64_sys_ioctl+0x3f/0x50 [ 1178.979393][T19297] do_syscall_64+0x39/0x80 [ 1178.983784][T19297] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1178.989647][T19297] RIP: 0033:0x45de59 [ 1178.993532][T19297] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1179.013106][T19297] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.023745][T19297] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1179.031708][T19297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1179.039655][T19297] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.047600][T19297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000039 [ 1179.055545][T19297] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1179.233379][T25474] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1179.633410][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1179.644206][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.655304][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.665240][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1179.678219][T25474] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1179.687271][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.697465][T25474] usb 6-1: config 0 descriptor?? [ 1180.164420][T25474] uclogic 0003:5543:0522.002E: item fetching failed at offset 0/1 [ 1180.172394][T25474] uclogic 0003:5543:0522.002E: parse failed [ 1180.178346][T25474] uclogic: probe of 0003:5543:0522.002E failed with error -22 [ 1180.366372][T25474] usb 6-1: USB disconnect, device number 103 [ 1181.153225][T25465] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1181.533209][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1181.544130][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.555222][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.565185][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1181.578253][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1181.587361][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.596977][T25465] usb 6-1: config 0 descriptor?? 11:10:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:25 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000440)={{r3}, "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"}) preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffd, r1, &(0x7f0000000040)=0xffffffff, 0x2, 0xd) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000cc68c8263900000000f0fac36f8b29e33f20001f8a64980d166322acf1d3e26c1c79b0956115a98bada181300b8b85765e0dbe5c0ec6e71755ff4519337800b0bbc3391782d57c26504237c9c2acf3f24ef91b8ab75001eb16adb1e371dbb00de572bae148ef0e112a249289c3005dcfc9b36277a2af14ad6ead597ebcf09adb7faf34c7fa768ca44734670b9d68744ed6afccc25237fa9e9e9bfa5b0f953f94daa137c9740c3456328614714fe994bc7693d7c9dca707fe8123a1d296c502beb6f97119f670e9cc64fa866f93294509b5fe859a1c95f1a27187"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r4}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') 11:10:25 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 11:10:25 executing program 3 (fault-call:5 fault-nth:58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:25 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5f49d2d7981ff0094618ee4c174c8827c4a4bb7f29e5a5696cf77e0099cbfd948695f2c8fc31a461c16f035015188921d33873a99d6bc82442469e0f21c9"], 0x0}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x20100, 0x0) fdatasync(r1) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x400, 0x0) bind$l2tp(r4, &(0x7f0000000140)={0x2, 0x0, @remote, 0x1}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x20, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x34, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xa2, 0x2, 0x8004, 0x1e, 0xc, 0x16, 0x4}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x7fffffff, 0x0, 0x40, 0x2}}]}}]}, 0x60}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000600)={&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000280)="125dac894ad414bb1fa38c1f77eac624de5730258ad0dbe8025b112bacbeea7c63d5e1fe36ed2e31865eaf4517af02886fc7c4006f5c9845e37676df0ec6ecddfe55772146e612e394bd8e043fe3dc87a97b48cfad26d271454f07316c2fb18bf1aac06bb51cf153f635d21a67972523f1547939d1d5a13c9f0fc618334c440f47f16271e9d9a6ca9bb27eda02cbfcad2e4f68163d", 0x95}, {&(0x7f0000000400)="50c9197016d048eb518db1271b7555b7482ba7f54c6bf8fa964d9cb0d70fc0c9758ff99806cfdd4ca809e1333f1f35607a11ee8941f3dd1acc5dadf95c067ac061d368e6511a406a98169979ad7c6d7a852f92db8f579485cc43fb1be90dedc08f52b1c97941851908d7e0fb063c6bffd1ac724adb2c0de472397fb9eba025b6b45dd94bb16053d181d11d4a4bc8c82202d9539bbbb6c90de6b283a91806c84cbfcb6893ed08c251e3f5963286971824bf3ae41e5335a158594a7c820e54a5e04a263fb45927bddd1abe0a665f18929f1f1c313588bed54b984e", 0xda}, {&(0x7f0000000500)="c5f7a217d267a17e2bba7367ebfd2307998b3c163a47aaf4aee1e6258809bc39f01e2c4def41a83dda7d833e0081ea5da4c8dc7f53a49627c073153ba6484449caa4c55897304e9b601267d01d2d2883587929cc5ef3c6c4cc98329da1ced44fbd3dd8b6aecb41e645fdac451e66de1674f61b3ec52c383e1987040fbc7fac99c7a7aa715ffe00d3ce8347454b899295fef4ce5c573583f8ccbf1a74b04510254e6bc78d337db77ff129e772367677710fb61142b2cd4d5b8d82f1c7d24c9c09dadbd8ab49ccb5de7235b4", 0xcb}, {&(0x7f00000001c0)="7be555dffba8733d6e9942042cc06476b9b8980bf6baedd683dff2cbb3b605d3c6562210c483d645", 0x28}], 0x5, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x2336}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}], 0x38, 0x4000}, 0x2000c040) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x6, 0x3f, 0x800, 0x84, 0xffffffffffffffff, 0x3f, [], r2, r5, 0x5, 0x2, 0x2}, 0x40) 11:10:25 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, r1, 0xfffffff7}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000001380)=""/4118, 0x1016) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)) 11:10:25 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x448143, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 1181.736665][T19350] fuse: blksize only supported for fuseblk [ 1181.753439][T19354] FAULT_INJECTION: forcing a failure. [ 1181.753439][T19354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1181.778166][T19354] CPU: 0 PID: 19354 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1181.786843][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.796884][T19354] Call Trace: [ 1181.800168][T19354] dump_stack+0x10f/0x19d [ 1181.804560][T19354] should_fail+0x23c/0x250 [ 1181.809119][T19354] __alloc_pages_nodemask+0xd8/0x380 [ 1181.814498][T19354] alloc_pages_current+0x21d/0x310 [ 1181.819599][T19354] __get_free_pages+0x8/0x30 [ 1181.824177][T19354] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1181.829803][T19354] kvm_mmu_load+0x7d/0x9c0 [ 1181.834211][T19354] ? check_preemption_disabled+0x51/0x140 [ 1181.839915][T19354] ? vmx_flush_tlb_all+0x4f/0x220 [ 1181.844927][T19354] vcpu_enter_guest+0x1c74/0x2660 [ 1181.849940][T19354] ? emulation_required+0x67/0x940 [ 1181.855045][T19354] vcpu_run+0x26e/0x740 [ 1181.859193][T19354] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1181.864638][T19354] kvm_vcpu_ioctl+0x565/0x950 [ 1181.869304][T19354] ? tomoyo_file_ioctl+0x1c/0x20 [ 1181.872485][T19374] fuse: blksize only supported for fuseblk [ 1181.874227][T19354] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1181.874241][T19354] __se_sys_ioctl+0xcb/0x140 [ 1181.874255][T19354] __x64_sys_ioctl+0x3f/0x50 [ 1181.874322][T19354] do_syscall_64+0x39/0x80 [ 1181.899480][T19354] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1181.905359][T19354] RIP: 0033:0x45de59 [ 1181.909303][T19354] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1181.928887][T19354] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:10:25 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 11:10:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:26 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000000)={{}, {@val, @max='max'}}) [ 1181.937283][T19354] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1181.945244][T19354] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1181.953208][T19354] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.961166][T19354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 1181.969127][T19354] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1181.977928][T25465] usbhid 6-1:0.0: can't add hid device: -71 11:10:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) [ 1181.989915][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1181.998725][T19381] fuse: blksize only supported for fuseblk [ 1182.009771][T25465] usb 6-1: USB disconnect, device number 104 11:10:26 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r3, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r3, 0x4b65, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:26 executing program 3 (fault-call:5 fault-nth:59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:26 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4005}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1182.141775][T19409] FAULT_INJECTION: forcing a failure. [ 1182.141775][T19409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.159085][T19409] CPU: 0 PID: 19409 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1182.167797][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.177826][T19409] Call Trace: [ 1182.181093][T19409] dump_stack+0x10f/0x19d [ 1182.185397][T19409] should_fail+0x23c/0x250 [ 1182.189787][T19409] __alloc_pages_nodemask+0xd8/0x380 [ 1182.195047][T19409] alloc_pages_current+0x21d/0x310 [ 1182.200149][T19409] __get_free_pages+0x8/0x30 [ 1182.204713][T19409] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1182.210328][T19409] kvm_mmu_load+0x7d/0x9c0 [ 1182.214719][T19409] ? check_preemption_disabled+0x51/0x140 [ 1182.220585][T19409] ? vmx_flush_tlb_all+0x4f/0x220 [ 1182.225584][T19409] vcpu_enter_guest+0x1c74/0x2660 [ 1182.230581][T19409] ? emulation_required+0x67/0x940 [ 1182.235668][T19409] vcpu_run+0x26e/0x740 [ 1182.239952][T19409] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1182.245387][T19409] kvm_vcpu_ioctl+0x565/0x950 [ 1182.250042][T19409] ? tomoyo_file_ioctl+0x1c/0x20 [ 1182.254969][T19409] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1182.260946][T19409] __se_sys_ioctl+0xcb/0x140 [ 1182.265540][T19409] __x64_sys_ioctl+0x3f/0x50 [ 1182.270116][T19409] do_syscall_64+0x39/0x80 [ 1182.274508][T19409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1182.280433][T19409] RIP: 0033:0x45de59 [ 1182.284378][T19409] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1182.303952][T19409] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.312332][T19409] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1182.320278][T19409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1182.328230][T19409] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1182.336249][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b [ 1182.344193][T19409] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1182.379057][T19414] fuse: blksize only supported for fuseblk 11:10:26 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000000)=0x10840, 0x4) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) 11:10:26 executing program 3 (fault-call:5 fault-nth:60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4006}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040435522f040000000000109022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xc0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0x0, 0xff, 'vcan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x2}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x0, 0x2}, {0x1, 0x5, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0x0, 'team0\x00', 'wg2\x00', {}, {0xff}, 0x1d, 0x0, 0x25}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x200, 0x7, 0x2, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 11:10:26 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) [ 1182.628393][T19434] FAULT_INJECTION: forcing a failure. [ 1182.628393][T19434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.645188][T19436] fuse: blksize only supported for fuseblk [ 1182.669507][T19434] CPU: 0 PID: 19434 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1182.678173][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.688207][T19434] Call Trace: [ 1182.691484][T19434] dump_stack+0x10f/0x19d [ 1182.695804][T19434] should_fail+0x23c/0x250 [ 1182.700249][T19434] __alloc_pages_nodemask+0xd8/0x380 [ 1182.705514][T19434] alloc_pages_current+0x21d/0x310 [ 1182.710606][T19434] __get_free_pages+0x8/0x30 [ 1182.715202][T19434] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1182.720808][T19434] kvm_mmu_load+0x7d/0x9c0 [ 1182.725196][T19434] ? check_preemption_disabled+0x51/0x140 [ 1182.730886][T19434] ? vmx_flush_tlb_all+0x4f/0x220 [ 1182.735882][T19434] vcpu_enter_guest+0x1c74/0x2660 [ 1182.740942][T19434] ? emulation_required+0x67/0x940 [ 1182.746027][T19434] vcpu_run+0x26e/0x740 [ 1182.750379][T19434] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1182.755809][T19434] kvm_vcpu_ioctl+0x565/0x950 [ 1182.760537][T19434] ? tomoyo_file_ioctl+0x1c/0x20 [ 1182.765449][T19434] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1182.771314][T19434] __se_sys_ioctl+0xcb/0x140 [ 1182.775967][T19434] __x64_sys_ioctl+0x3f/0x50 [ 1182.780529][T19434] do_syscall_64+0x39/0x80 [ 1182.784997][T19434] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1182.790858][T19434] RIP: 0033:0x45de59 [ 1182.794738][T19434] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:10:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4007}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1182.814439][T19434] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.822879][T19434] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1182.830906][T19434] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1182.838851][T19434] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1182.846836][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003c [ 1182.854890][T19434] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:27 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 11:10:27 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x32, 0x46, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x2, 0x97, "bd93130b32c326b4831af7eb7b1a035be26d10a581f4070d2f1719daac675c5fecc793bfa55eb2ba6fb70e8e98a29505267c18f2bfef9e412929278f010c08118d49b91bb7145955111c3b80fd760bb9500e5582f3244b4ff37253b0325334c2841541fdf74546d5a2e80db2878cc4663c630baec504061a91fcb95e4f66fa427a42b7a786ae430dcc106b30a075553ece9b7dbff544d9"}, @hao={0xc9, 0x10, @mcast2}, @generic={0x6, 0xfb, "4471cf9a292e4738f7edc593fb1263870c85f527eff5eb986fc216d5b7bffcec8a06ba1fcd2c45440e96e96065ddc58aab621e4aca26d11747bc962fa81acf74cc0aae7f019e67acbce731a202349aa763a7e20ba70c6fc7f6a8c1a0c4f40cf9b57c909a162e1e5c7c0a80e1b03f55fa82199f156b9c73195d02e547869ca62e1a15ac6988b197159c6396388361199348782f8b5f5ed90bafb04839a212385a40a7c8954cd7cac54ed0d3e0ea994ddf80c35cc0efaa4702ace77f33c385218d6d62fbb0f7e25d0e6e4aaac6f1fd443eaec43a8b6dbf3782b21ab0848985ca3c25cde61644bfc396673d0c50946b248b973d56269af7b763393c3f"}, @ra={0x5, 0x2, 0x401}, @generic={0xf9, 0x75, "e64ba348c5648cb0b9cbd103389a51d4e34f959fcf99497d684049d32e0127c1cdb4bf3c91e6d9bded52487fdc08a5341af35ed39028bf417b414bfeb789f65bc91e4efb8ab4ab2b786fee3b7c97399493b0eaaea310b7be4931cc8e05a69f2c37956e710c611226e49fbe08b754621edc17e1415b"}]}, 0x240) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) select(0x40, &(0x7f0000000000)={0x2, 0x81, 0x73, 0x800, 0x7fffffff, 0x9, 0x6, 0x9}, &(0x7f0000000040)={0x2, 0x9, 0x800, 0x0, 0x100000000, 0x1ee, 0x1, 0x5}, &(0x7f0000000140)={0x5, 0x3, 0x2, 0x5, 0x3, 0xffffffffffffffff, 0x20, 0x7f}, &(0x7f0000000180)) vmsplice(r0, 0x0, 0x0, 0x0) [ 1182.928916][T19459] fuse: blksize only supported for fuseblk 11:10:27 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r3}, 0x10) vmsplice(r0, 0x0, 0xfffffffffffffe05, 0x2) 11:10:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4008}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:27 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) 11:10:27 executing program 3 (fault-call:5 fault-nth:61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:27 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000100001950039f04bd34ab88860c5b1648fc5ca157701a53846540a0a5a9bf9e4f84032fdf1a4e373c4f417d5bea561ba9e200f00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='io_uring_poll_arm\x00', r2}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) [ 1183.033082][T25465] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1183.071059][T19485] fuse: blksize only supported for fuseblk 11:10:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4009}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1183.110404][T19487] FAULT_INJECTION: forcing a failure. [ 1183.110404][T19487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1183.148633][T19487] CPU: 0 PID: 19487 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1183.157313][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.167452][T19487] Call Trace: [ 1183.170733][T19487] dump_stack+0x10f/0x19d [ 1183.175047][T19487] should_fail+0x23c/0x250 [ 1183.178521][T19503] fuse: blksize only supported for fuseblk [ 1183.179451][T19487] __alloc_pages_nodemask+0xd8/0x380 [ 1183.179474][T19487] alloc_pages_current+0x21d/0x310 [ 1183.179486][T19487] __get_free_pages+0x8/0x30 [ 1183.179497][T19487] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1183.179507][T19487] kvm_mmu_load+0x7d/0x9c0 [ 1183.179518][T19487] ? check_preemption_disabled+0x51/0x140 [ 1183.179528][T19487] ? vmx_flush_tlb_all+0x4f/0x220 [ 1183.179541][T19487] vcpu_enter_guest+0x1c74/0x2660 [ 1183.179552][T19487] ? emulation_required+0x67/0x940 [ 1183.179573][T19487] vcpu_run+0x26e/0x740 [ 1183.235239][T19487] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1183.240685][T19487] kvm_vcpu_ioctl+0x565/0x950 [ 1183.245386][T19487] ? tomoyo_file_ioctl+0x1c/0x20 [ 1183.250319][T19487] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1183.256290][T19487] __se_sys_ioctl+0xcb/0x140 [ 1183.260872][T19487] __x64_sys_ioctl+0x3f/0x50 [ 1183.265446][T19487] do_syscall_64+0x39/0x80 [ 1183.269844][T19487] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1183.275715][T19487] RIP: 0033:0x45de59 [ 1183.279594][T19487] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1183.299181][T19487] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.307575][T19487] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1183.315526][T19487] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1183.323481][T19487] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.331437][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003d [ 1183.339394][T19487] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:27 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1183.593320][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1183.604687][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.627705][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.637509][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1183.650532][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=f022, bcdDevice= 0.40 [ 1183.659568][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.681045][T25465] usb 6-1: config 0 descriptor?? [ 1184.163782][T25465] hid-generic 0003:5543:F022.002F: item fetching failed at offset 0/1 [ 1184.172081][T25465] hid-generic: probe of 0003:5543:F022.002F failed with error -22 [ 1184.365413][T25465] usb 6-1: USB disconnect, device number 105 [ 1185.132884][T14845] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1185.492918][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1185.503823][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.515551][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.525699][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1185.539132][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=f022, bcdDevice= 0.40 [ 1185.548472][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.558203][T14845] usb 6-1: config 0 descriptor?? 11:10:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000080)="234820035172647a1b1ca66a", 0xc) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "55ab6f6d"}]}}, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000280)=""/148, 0x94, 0x9c, 0x0) 11:10:29 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000002000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='svcrdma_qp_error\x00', r1}, 0x10) vmsplice(r0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040)) 11:10:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) 11:10:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x400a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:29 executing program 3 (fault-call:5 fault-nth:62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:29 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) [ 1185.734003][T19551] FAULT_INJECTION: forcing a failure. [ 1185.734003][T19551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1185.746010][T19556] fuse: blksize only supported for fuseblk [ 1185.758943][T19551] CPU: 0 PID: 19551 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1185.762832][T14845] usbhid 6-1:0.0: can't add hid device: -71 [ 1185.767683][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.767687][T19551] Call Trace: [ 1185.767702][T19551] dump_stack+0x10f/0x19d [ 1185.767719][T19551] should_fail+0x23c/0x250 [ 1185.783559][T14845] usbhid: probe of 6-1:0.0 failed with error -71 [ 1185.783667][T19551] __alloc_pages_nodemask+0xd8/0x380 [ 1185.783686][T19551] alloc_pages_current+0x21d/0x310 [ 1185.807424][T14845] usb 6-1: USB disconnect, device number 106 [ 1185.812337][T19551] __get_free_pages+0x8/0x30 [ 1185.812413][T19551] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1185.828608][T19551] kvm_mmu_load+0x7d/0x9c0 [ 1185.833012][T19551] ? check_preemption_disabled+0x51/0x140 [ 1185.838715][T19551] ? vmx_flush_tlb_all+0x4f/0x220 [ 1185.843730][T19551] vcpu_enter_guest+0x1c74/0x2660 [ 1185.848750][T19551] vcpu_run+0x26e/0x740 [ 1185.852897][T19551] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1185.858368][T19551] kvm_vcpu_ioctl+0x565/0x950 [ 1185.863037][T19551] ? tomoyo_file_ioctl+0x1c/0x20 [ 1185.868029][T19551] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1185.873911][T19551] __se_sys_ioctl+0xcb/0x140 [ 1185.878487][T19551] __x64_sys_ioctl+0x3f/0x50 [ 1185.883131][T19551] do_syscall_64+0x39/0x80 [ 1185.887535][T19551] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1185.893414][T19551] RIP: 0033:0x45de59 [ 1185.897299][T19551] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.916884][T19551] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.925281][T19551] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:10:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040435522f040000000000109022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xc0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0x0, 0xff, 'vcan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x2}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x0, 0x2}, {0x1, 0x5, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0x0, 'team0\x00', 'wg2\x00', {}, {0xff}, 0x1d, 0x0, 0x25}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x200, 0x7, 0x2, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 11:10:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x400b}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1185.933238][T19551] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1185.941201][T19551] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.949163][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003e [ 1185.957124][T19551] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x400c}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 11:10:30 executing program 3 (fault-call:5 fault-nth:63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1185.999987][T19586] fuse: blksize only supported for fuseblk 11:10:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x400d}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1186.048125][T19591] fuse: blksize only supported for fuseblk [ 1186.107625][T19598] FAULT_INJECTION: forcing a failure. [ 1186.107625][T19598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1186.124536][T19606] fuse: blksize only supported for fuseblk [ 1186.141897][T19598] CPU: 1 PID: 19598 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1186.150669][T19598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.160707][T19598] Call Trace: [ 1186.164015][T19598] dump_stack+0x10f/0x19d [ 1186.168335][T19598] should_fail+0x23c/0x250 [ 1186.172744][T19598] __alloc_pages_nodemask+0xd8/0x380 [ 1186.178044][T19598] alloc_pages_current+0x21d/0x310 [ 1186.183144][T19598] __get_free_pages+0x8/0x30 [ 1186.187721][T19598] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1186.193340][T19598] kvm_mmu_load+0x7d/0x9c0 [ 1186.197805][T19598] ? check_preemption_disabled+0x51/0x140 [ 1186.203607][T19598] ? vmx_flush_tlb_all+0x4f/0x220 [ 1186.208623][T19598] vcpu_enter_guest+0x1c74/0x2660 [ 1186.213653][T19598] vcpu_run+0x26e/0x740 [ 1186.217877][T19598] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1186.223324][T19598] kvm_vcpu_ioctl+0x565/0x950 [ 1186.227982][T19598] ? tomoyo_file_ioctl+0x1c/0x20 [ 1186.232910][T19598] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1186.238786][T19598] __se_sys_ioctl+0xcb/0x140 [ 1186.243357][T19598] __x64_sys_ioctl+0x3f/0x50 [ 1186.247934][T19598] do_syscall_64+0x39/0x80 [ 1186.252346][T19598] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1186.258221][T19598] RIP: 0033:0x45de59 [ 1186.262103][T19598] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.281689][T19598] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.290102][T19598] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1186.298058][T19598] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1186.306016][T19598] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.313972][T19598] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 1186.321933][T19598] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1186.334048][T25474] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1186.402824][T14845] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1186.692754][T25474] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1186.704731][T25474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.715778][T25474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.727012][T25474] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1186.740061][T25474] usb 1-1: New USB device found, idVendor=5543, idProduct=f022, bcdDevice= 0.40 [ 1186.750414][T25474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.759256][T25474] usb 1-1: config 0 descriptor?? [ 1186.766504][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1186.777578][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.788834][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.798693][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1186.811702][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1186.823652][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.832306][T14845] usb 6-1: config 0 descriptor?? [ 1187.263477][T25474] hid-generic 0003:5543:F022.0030: item fetching failed at offset 0/1 [ 1187.271714][T25474] hid-generic: probe of 0003:5543:F022.0030 failed with error -22 [ 1187.313660][T14845] uclogic 0003:5543:0522.0031: item fetching failed at offset 0/1 [ 1187.321558][T14845] uclogic 0003:5543:0522.0031: parse failed [ 1187.336368][T14845] uclogic: probe of 0003:5543:0522.0031 failed with error -22 [ 1187.471873][T14845] usb 1-1: USB disconnect, device number 7 [ 1187.528831][T25474] usb 6-1: USB disconnect, device number 107 [ 1188.302623][T10115] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1188.712583][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1188.723433][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.734587][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.744424][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1188.757421][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1188.766515][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.777311][T10115] usb 6-1: config 0 descriptor?? 11:10:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x400e}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) 11:10:33 executing program 3 (fault-call:5 fault-nth:64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:33 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x1) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000002980)=0x25b, 0x4) pipe(&(0x7f0000002c80)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000002cc0), 0x8) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000029c0)=0xffffffffffffeb2e) r3 = syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x1, &(0x7f0000002640)=[{&(0x7f0000002540)="57e54cbc90e2786dbe910e020451ef01471a6c31496d639c54347430ebbd469b9cf16994e8925ba6e422a1e38eb34c2050b543ef5b106bdb5342b712330e6de50b1b5d1b96d99857f91d6107b8ebe51f4858cf5bf4b8ee970eee1af43bcf29dc0ce1fdde1270fa8b925fd73c7a2f5574244bc490e2131f491c0bafebfd5b54fa7bd6c81ce5ee26159ce5fe74623a57d755588aea2a5a43a7cef7b893df5cd6ab82333ce2b3ecf6058fea093e69861f97011ab6e0e91b9fef957686023dece790ab723f2b07c3ef84bff02b65ccecc044f54c57ba29434a68ace2e55db49dcf9a445f8f8b64bd1080da274dfa08878e55180aaa133bcad7", 0xf7}], 0x20040, &(0x7f0000002680)={[{@nodots='nodots'}, {@fat=@tz_utc='tz=UTC'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@quiet='quiet'}, {@nodots='nodots'}], [{@smackfsdef={'smackfsdef', 0x3d, 'system.posix_acl_access\x00'}}, {@permit_directio='permit_directio'}, {@smackfshat={'smackfshat', 0x3d, ':!\xef'}}]}) statx(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sched_rr_get_interval(r5, &(0x7f0000001440)) statx(r1, &(0x7f0000000200)='./file0\x00', 0x400, 0x8, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002900)={0x5, 0x0, [{0x8c6}, {0x83a, 0x0, 0x5}, {0x329, 0x0, 0xb1}, {0xc0000083, 0x0, 0x5}, {0x0, 0x0, 0x2}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000001480)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="040004000000000008000600", @ANYRES32=0xee01, @ANYBLOB="080002b49a616b3f60a49700296536a87e9d5a81da7c47", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000000000000000"], 0x64, 0x2) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/96}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002700)='/proc/self/net/pfkey\x00', 0xc02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000002740)=0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000001500)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000028c0)={&(0x7f0000002780), 0xc, &(0x7f0000002880)={&(0x7f0000002a00)=ANY=[@ANYBLOB="0100009b00f5af9c519fc964cb00", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf25020000000800010002000000500008804c00078008000500afb155560800060075000000080005009d520d4a08000600b700000008000500b528154f080005000331be5108000600bd00000008000500938bb33b08000600010000002400048005000300050000000500030000000000050003000200000005000300010000000c000480050003000000000008000200030000000800010003000000"], 0xac}, 0x1, 0x0, 0x0, 0x24004815}, 0x4008800) 11:10:33 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r3, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r3, 0x4b65, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7a72605e09baca9c, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x40000c0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0x4000400, "06ba1a69df7d53a1b3c0945dcc795d4fe7c71bea41737ce7c687417f63794e24", 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "2eb69bd8"}]}}, 0x0}, 0x0) [ 1188.906017][T19673] fuse: blksize only supported for fuseblk [ 1188.937555][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1188.945004][T10115] usbhid: probe of 6-1:0.0 failed with error -71 11:10:33 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r3, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r3, 0x4b65, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) [ 1188.945556][T19675] FAULT_INJECTION: forcing a failure. [ 1188.945556][T19675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1188.965709][T10115] usb 6-1: USB disconnect, device number 108 11:10:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) [ 1189.000127][T19675] CPU: 0 PID: 19675 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1189.008799][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.018888][T19675] Call Trace: [ 1189.022168][T19675] dump_stack+0x10f/0x19d [ 1189.026531][T19675] should_fail+0x23c/0x250 [ 1189.030942][T19675] __alloc_pages_nodemask+0xd8/0x380 [ 1189.036217][T19675] alloc_pages_current+0x21d/0x310 [ 1189.041308][T19675] __get_free_pages+0x8/0x30 [ 1189.045873][T19675] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1189.051523][T19675] kvm_mmu_load+0x7d/0x9c0 [ 1189.055927][T19675] ? check_preemption_disabled+0x51/0x140 [ 1189.061652][T19675] ? vmx_flush_tlb_all+0x4f/0x220 [ 1189.066659][T19675] vcpu_enter_guest+0x1c74/0x2660 [ 1189.071659][T19675] ? emulation_required+0x67/0x940 [ 1189.076746][T19675] vcpu_run+0x26e/0x740 [ 1189.080877][T19675] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1189.086308][T19675] kvm_vcpu_ioctl+0x565/0x950 [ 1189.090971][T19675] ? tomoyo_file_ioctl+0x1c/0x20 [ 1189.095894][T19675] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1189.101763][T19675] __se_sys_ioctl+0xcb/0x140 [ 1189.106329][T19675] __x64_sys_ioctl+0x3f/0x50 [ 1189.110895][T19675] do_syscall_64+0x39/0x80 [ 1189.115286][T19675] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1189.121148][T19675] RIP: 0033:0x45de59 [ 1189.125019][T19675] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:10:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4010}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1189.144595][T19675] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.152989][T19675] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1189.160934][T19675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1189.168877][T19675] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.176833][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 1189.184788][T19675] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:33 executing program 3 (fault-call:5 fault-nth:65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:33 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r3, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r3, 0x4b65, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) vmsplice(r1, 0x0, 0x0, 0x0) 11:10:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4011}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1189.281778][T19705] fuse: blksize only supported for fuseblk 11:10:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 11:10:33 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r3, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r3, 0x4b65, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) [ 1189.364646][T19716] fuse: blksize only supported for fuseblk [ 1189.385215][T19717] FAULT_INJECTION: forcing a failure. [ 1189.385215][T19717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:10:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4012}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1189.421525][T19717] CPU: 0 PID: 19717 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1189.430241][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.440285][T19717] Call Trace: [ 1189.443565][T19717] dump_stack+0x10f/0x19d [ 1189.446991][T19728] fuse: blksize only supported for fuseblk [ 1189.447897][T19717] should_fail+0x23c/0x250 [ 1189.447922][T19717] __alloc_pages_nodemask+0xd8/0x380 [ 1189.463420][T19717] alloc_pages_current+0x21d/0x310 [ 1189.468514][T19717] __get_free_pages+0x8/0x30 [ 1189.473166][T19717] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1189.478839][T19717] kvm_mmu_load+0x7d/0x9c0 [ 1189.483245][T19717] ? check_preemption_disabled+0x51/0x140 [ 1189.488948][T19717] ? vmx_flush_tlb_all+0x4f/0x220 [ 1189.493955][T19717] vcpu_enter_guest+0x1c74/0x2660 [ 1189.498964][T19717] ? emulation_required+0x67/0x940 [ 1189.504065][T19717] vcpu_run+0x26e/0x740 [ 1189.508250][T19717] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1189.513694][T19717] kvm_vcpu_ioctl+0x565/0x950 [ 1189.518358][T19717] ? tomoyo_file_ioctl+0x1c/0x20 [ 1189.523348][T19717] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1189.529233][T19717] __se_sys_ioctl+0xcb/0x140 [ 1189.533852][T19717] __x64_sys_ioctl+0x3f/0x50 [ 1189.538428][T19717] do_syscall_64+0x39/0x80 [ 1189.542831][T19717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1189.548703][T19717] RIP: 0033:0x45de59 [ 1189.552629][T19717] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.572283][T19717] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.580677][T19717] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1189.588627][T19717] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1189.596580][T19717] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.604534][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000041 [ 1189.612491][T19717] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:33 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) 11:10:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4025}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1189.698970][T10115] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1189.717550][T19743] fuse: blksize only supported for fuseblk [ 1190.132451][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1190.143419][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.154300][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.164122][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1190.177145][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1190.186300][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.195940][T10115] usb 6-1: config 0 descriptor?? [ 1190.673468][T10115] uclogic 0003:5543:0522.0032: item fetching failed at offset 0/1 [ 1190.681320][T10115] uclogic 0003:5543:0522.0032: parse failed [ 1190.687477][T10115] uclogic: probe of 0003:5543:0522.0032 failed with error -22 [ 1190.888910][T14845] usb 6-1: USB disconnect, device number 109 [ 1191.662316][T10115] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1192.042302][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1192.053099][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.064163][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.074004][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1192.086986][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1192.096200][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.107398][T10115] usb 6-1: config 0 descriptor?? 11:10:36 executing program 3 (fault-call:5 fault-nth:66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:36 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r2, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r2, 0x4b65, 0x5) 11:10:36 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) 11:10:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4048}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:36 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)=0x4) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000001c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) r4 = getpid() r5 = getpid() rt_tgsigqueueinfo(r4, r5, 0x16, &(0x7f0000000000)) fcntl$setown(r3, 0x8, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001340)=0xe8) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x804) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:36 executing program 5: process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000001380)=""/254, 0xfe}], 0x5, &(0x7f0000001600)=[{&(0x7f0000001500)=""/245, 0xf5}], 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0xfff, 0x80, 0x209a, 0x1, 0x17, "162516356f4f20ef57865a7913fe6883b0c442"}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) [ 1192.251210][T19786] FAULT_INJECTION: forcing a failure. [ 1192.251210][T19786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1192.257516][T19789] fuse: blksize only supported for fuseblk [ 1192.288125][T19786] CPU: 1 PID: 19786 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1192.296798][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.306835][T19786] Call Trace: [ 1192.310116][T19786] dump_stack+0x10f/0x19d [ 1192.314453][T19786] should_fail+0x23c/0x250 [ 1192.318863][T19786] __alloc_pages_nodemask+0xd8/0x380 [ 1192.324203][T19786] alloc_pages_current+0x21d/0x310 [ 1192.329302][T19786] __get_free_pages+0x8/0x30 [ 1192.333884][T19786] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1192.339506][T19786] kvm_mmu_load+0x7d/0x9c0 [ 1192.344013][T19786] ? check_preemption_disabled+0x51/0x140 [ 1192.349714][T19786] ? vmx_flush_tlb_all+0x4f/0x220 [ 1192.354751][T19786] vcpu_enter_guest+0x1c74/0x2660 [ 1192.359777][T19786] vcpu_run+0x26e/0x740 [ 1192.363925][T19786] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1192.369365][T19786] kvm_vcpu_ioctl+0x565/0x950 [ 1192.374029][T19786] ? tomoyo_file_ioctl+0x1c/0x20 [ 1192.378953][T19786] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1192.384832][T19786] __se_sys_ioctl+0xcb/0x140 [ 1192.389474][T19786] __x64_sys_ioctl+0x3f/0x50 [ 1192.394046][T19786] do_syscall_64+0x39/0x80 [ 1192.398441][T19786] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1192.404421][T19786] RIP: 0033:0x45de59 [ 1192.408299][T19786] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.427893][T19786] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.436296][T19786] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1192.444297][T19786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:10:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x404c}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:36 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) 11:10:36 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r2, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r2, 0x4b65, 0x5) [ 1192.452313][T19786] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.460304][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000042 [ 1192.468256][T19786] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1192.473329][T19811] fuse: blksize only supported for fuseblk [ 1192.482887][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1192.489091][T10115] usbhid: probe of 6-1:0.0 failed with error -71 11:10:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x405c}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:36 executing program 3 (fault-call:5 fault-nth:67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1192.513824][T10115] usb 6-1: USB disconnect, device number 110 11:10:36 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5) 11:10:36 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) [ 1192.601924][T19833] fuse: blksize only supported for fuseblk [ 1192.640010][T19836] FAULT_INJECTION: forcing a failure. [ 1192.640010][T19836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1192.665696][T19836] CPU: 1 PID: 19836 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1192.674369][T19836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.684398][T19836] Call Trace: [ 1192.687681][T19836] dump_stack+0x10f/0x19d [ 1192.692008][T19836] should_fail+0x23c/0x250 [ 1192.696399][T19836] __alloc_pages_nodemask+0xd8/0x380 [ 1192.701685][T19836] alloc_pages_current+0x21d/0x310 [ 1192.706775][T19836] __get_free_pages+0x8/0x30 [ 1192.711338][T19836] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1192.716943][T19836] kvm_mmu_load+0x7d/0x9c0 [ 1192.721341][T19836] ? check_preemption_disabled+0x51/0x140 [ 1192.727072][T19836] ? vmx_flush_tlb_all+0x4f/0x220 [ 1192.732182][T19836] vcpu_enter_guest+0x1c74/0x2660 [ 1192.737181][T19836] ? emulation_required+0x67/0x940 [ 1192.742271][T19836] vcpu_run+0x26e/0x740 [ 1192.746416][T19836] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1192.751846][T19836] kvm_vcpu_ioctl+0x565/0x950 [ 1192.756553][T19836] ? tomoyo_file_ioctl+0x1c/0x20 [ 1192.761529][T19836] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1192.767441][T19836] __se_sys_ioctl+0xcb/0x140 [ 1192.772022][T19836] __x64_sys_ioctl+0x3f/0x50 [ 1192.776598][T19836] do_syscall_64+0x39/0x80 [ 1192.780986][T19836] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1192.786908][T19836] RIP: 0033:0x45de59 [ 1192.790777][T19836] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.810359][T19836] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.818760][T19836] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1192.826759][T19836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1192.834709][T19836] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.842668][T19836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000043 11:10:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4060}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) [ 1192.850686][T19836] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1192.889793][T19852] fuse: blksize only supported for fuseblk 11:10:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4068}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1192.956247][T19865] fuse: blksize only supported for fuseblk 11:10:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f0000000000), 0x0, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 1193.062175][T10115] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1193.442176][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1193.453042][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.464231][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.474027][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1193.487050][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1193.496093][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.505843][T10115] usb 6-1: config 0 descriptor?? [ 1194.002930][T10115] uclogic 0003:5543:0522.0033: item fetching failed at offset 0/1 [ 1194.010851][T10115] uclogic 0003:5543:0522.0033: parse failed [ 1194.026418][T10115] uclogic: probe of 0003:5543:0522.0033 failed with error -22 [ 1194.205507][T10115] usb 6-1: USB disconnect, device number 111 11:10:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x406c}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:38 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2500000000000000) 11:10:38 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) 11:10:38 executing program 3 (fault-call:5 fault-nth:68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:38 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000000)={@any, 0x10001}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000000700053602400010946758d4b1e7817ecedd1c1c00000109022d00010000000009040000f8ac857c1a0c37c6b5ac11f646234164fd03011b6d5076b857f5d9a0420db50500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0xff) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:10:38 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) 11:10:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4074}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1194.773466][T19913] fuse: blksize only supported for fuseblk [ 1194.798378][T19915] FAULT_INJECTION: forcing a failure. [ 1194.798378][T19915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1194.847569][T19915] CPU: 1 PID: 19915 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1194.856247][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.866322][T19915] Call Trace: [ 1194.869596][T19915] dump_stack+0x10f/0x19d [ 1194.873911][T19915] should_fail+0x23c/0x250 [ 1194.878315][T19915] __alloc_pages_nodemask+0xd8/0x380 [ 1194.883592][T19915] alloc_pages_current+0x21d/0x310 [ 1194.888688][T19915] __get_free_pages+0x8/0x30 [ 1194.893265][T19915] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1194.898881][T19915] kvm_mmu_load+0x7d/0x9c0 [ 1194.903293][T19915] ? check_preemption_disabled+0x51/0x140 [ 1194.911250][T19915] ? vmx_flush_tlb_all+0x4f/0x220 [ 1194.916276][T19915] vcpu_enter_guest+0x1c74/0x2660 [ 1194.921294][T19915] ? emulation_required+0x67/0x940 [ 1194.926398][T19915] vcpu_run+0x26e/0x740 [ 1194.930544][T19915] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1194.936067][T19915] kvm_vcpu_ioctl+0x565/0x950 [ 1194.940729][T19915] ? tomoyo_file_ioctl+0x1c/0x20 [ 1194.945656][T19915] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1194.951538][T19915] __se_sys_ioctl+0xcb/0x140 [ 1194.956124][T19915] __x64_sys_ioctl+0x3f/0x50 [ 1194.960699][T19915] do_syscall_64+0x39/0x80 [ 1194.965142][T19915] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1194.971022][T19915] RIP: 0033:0x45de59 [ 1194.974905][T19915] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:10:39 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) [ 1194.994488][T19915] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1194.998436][T19938] fuse: blksize only supported for fuseblk [ 1195.003229][T19915] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1195.003237][T19915] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1195.003243][T19915] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.003255][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000044 11:10:39 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) [ 1195.003262][T19915] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:39 executing program 3 (fault-call:5 fault-nth:69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1195.125522][T19949] FAULT_INJECTION: forcing a failure. [ 1195.125522][T19949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1195.139726][T19949] CPU: 1 PID: 19949 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1195.148384][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.158412][T19949] Call Trace: [ 1195.161757][T19949] dump_stack+0x10f/0x19d [ 1195.166075][T19949] should_fail+0x23c/0x250 [ 1195.170468][T19949] __alloc_pages_nodemask+0xd8/0x380 [ 1195.175728][T19949] alloc_pages_current+0x21d/0x310 [ 1195.180826][T19949] __get_free_pages+0x8/0x30 [ 1195.185387][T19949] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1195.191018][T19949] kvm_mmu_load+0x7d/0x9c0 [ 1195.195407][T19949] ? check_preemption_disabled+0x51/0x140 [ 1195.201098][T19949] ? vmx_flush_tlb_all+0x4f/0x220 [ 1195.206155][T19949] vcpu_enter_guest+0x1c74/0x2660 [ 1195.211153][T19949] ? emulation_required+0x67/0x940 [ 1195.216278][T19949] vcpu_run+0x26e/0x740 [ 1195.220432][T19949] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1195.225865][T19949] kvm_vcpu_ioctl+0x565/0x950 [ 1195.230516][T19949] ? tomoyo_file_ioctl+0x1c/0x20 [ 1195.235477][T19949] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1195.241342][T19949] __se_sys_ioctl+0xcb/0x140 [ 1195.245974][T19949] __x64_sys_ioctl+0x3f/0x50 [ 1195.250540][T19949] do_syscall_64+0x39/0x80 [ 1195.254930][T19949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1195.260793][T19949] RIP: 0033:0x45de59 [ 1195.264665][T19949] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.284309][T19949] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.292692][T19949] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1195.300738][T19949] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1195.308693][T19949] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.316638][T19949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 11:10:39 executing program 0: pipe(&(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) 11:10:39 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3400000000000000) [ 1195.324582][T19949] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1195.339629][T14845] usb 6-1: new high-speed USB device number 112 using dummy_hcd 11:10:39 executing program 3 (fault-call:5 fault-nth:70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x407a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1195.474997][T19970] FAULT_INJECTION: forcing a failure. [ 1195.474997][T19970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1195.492902][T19973] fuse: blksize only supported for fuseblk [ 1195.499764][T19970] CPU: 1 PID: 19970 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1195.508429][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.518464][T19970] Call Trace: [ 1195.521802][T19970] dump_stack+0x10f/0x19d [ 1195.526117][T19970] should_fail+0x23c/0x250 [ 1195.530525][T19970] __alloc_pages_nodemask+0xd8/0x380 [ 1195.535809][T19970] alloc_pages_current+0x21d/0x310 [ 1195.540912][T19970] __get_free_pages+0x8/0x30 [ 1195.545496][T19970] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1195.551113][T19970] kvm_mmu_load+0x7d/0x9c0 [ 1195.555517][T19970] ? check_preemption_disabled+0x51/0x140 [ 1195.561304][T19970] ? vmx_flush_tlb_all+0x4f/0x220 [ 1195.566366][T19970] vcpu_enter_guest+0x1c74/0x2660 [ 1195.571385][T19970] vcpu_run+0x26e/0x740 [ 1195.575575][T19970] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1195.581021][T19970] kvm_vcpu_ioctl+0x565/0x950 [ 1195.585684][T19970] ? tomoyo_file_ioctl+0x1c/0x20 [ 1195.590684][T19970] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1195.596566][T19970] __se_sys_ioctl+0xcb/0x140 [ 1195.601154][T19970] __x64_sys_ioctl+0x3f/0x50 [ 1195.605733][T19970] do_syscall_64+0x39/0x80 [ 1195.610183][T19970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1195.616062][T19970] RIP: 0033:0x45de59 [ 1195.619946][T19970] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.639636][T19970] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.648035][T19970] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1195.655992][T19970] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1195.663987][T19970] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 11:10:39 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/83) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:39 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e00000000000000) [ 1195.671958][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000046 [ 1195.679952][T19970] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1195.771936][T14845] usb 6-1: device descriptor read/64, error 18 [ 1196.171916][T14845] usb 6-1: device descriptor read/64, error 18 [ 1196.461927][T14845] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1196.771861][T14845] usb 6-1: device descriptor read/64, error 18 [ 1197.181836][T14845] usb 6-1: device descriptor read/64, error 18 [ 1197.301912][T14845] usb usb6-port1: attempt power cycle 11:10:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd}, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0x0, 'B'}, @global=@item_012={0x2, 0x1, 0x0, "830d"}, @global=@item_4={0x3, 0x1, 0xf, "6b68820a"}, @global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0) 11:10:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x5e00}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:10:41 executing program 0: pipe(&(0x7f0000000400)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) 11:10:41 executing program 3 (fault-call:5 fault-nth:71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:41 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5c00000000000000) 11:10:41 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3be}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0xc0) write(r1, &(0x7f0000000340), 0x41395527) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) [ 1197.814971][T20017] FAULT_INJECTION: forcing a failure. [ 1197.814971][T20017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1197.830916][T20019] fuse: Invalid rootmode [ 1197.853568][T20017] CPU: 0 PID: 20017 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 11:10:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) [ 1197.862246][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.872283][T20017] Call Trace: [ 1197.875615][T20017] dump_stack+0x10f/0x19d [ 1197.879930][T20017] should_fail+0x23c/0x250 [ 1197.884337][T20017] __alloc_pages_nodemask+0xd8/0x380 [ 1197.889650][T20017] alloc_pages_current+0x21d/0x310 [ 1197.894749][T20017] __get_free_pages+0x8/0x30 [ 1197.899328][T20017] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1197.904950][T20017] kvm_mmu_load+0x7d/0x9c0 [ 1197.909383][T20017] ? check_preemption_disabled+0x51/0x140 11:10:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x8}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1197.909394][T20017] ? vmx_flush_tlb_all+0x4f/0x220 [ 1197.909464][T20017] vcpu_enter_guest+0x1c74/0x2660 [ 1197.909477][T20017] ? emulation_required+0x67/0x940 [ 1197.909496][T20017] vcpu_run+0x26e/0x740 11:10:42 executing program 3 (fault-call:5 fault-nth:72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8004000000000000) [ 1197.909537][T20017] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1197.909550][T20017] kvm_vcpu_ioctl+0x565/0x950 11:10:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x8}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1197.909561][T20017] ? tomoyo_file_ioctl+0x1c/0x20 [ 1197.909572][T20017] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1197.909582][T20017] __se_sys_ioctl+0xcb/0x140 [ 1197.909594][T20017] __x64_sys_ioctl+0x3f/0x50 [ 1197.909604][T20017] do_syscall_64+0x39/0x80 [ 1197.909618][T20017] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1197.909656][T20017] RIP: 0033:0x45de59 [ 1197.909667][T20017] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1197.909672][T20017] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.909681][T20017] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1197.909686][T20017] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1197.909692][T20017] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.909699][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047 [ 1197.909706][T20017] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1198.025442][T20054] fuse: Unknown parameter 'user_id00000000000000000000' [ 1198.038029][T20057] FAULT_INJECTION: forcing a failure. [ 1198.038029][T20057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1198.038041][T20057] CPU: 0 PID: 20057 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1198.038046][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.038049][T20057] Call Trace: [ 1198.038064][T20057] dump_stack+0x10f/0x19d [ 1198.038073][T20057] should_fail+0x23c/0x250 [ 1198.038164][T20057] __alloc_pages_nodemask+0xd8/0x380 [ 1198.038177][T20057] alloc_pages_current+0x21d/0x310 [ 1198.038187][T20057] __get_free_pages+0x8/0x30 [ 1198.038196][T20057] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1198.038207][T20057] kvm_mmu_load+0x7d/0x9c0 [ 1198.038218][T20057] ? check_preemption_disabled+0x51/0x140 [ 1198.038229][T20057] ? vmx_flush_tlb_all+0x4f/0x220 [ 1198.038244][T20057] vcpu_enter_guest+0x1c74/0x2660 [ 1198.038328][T20057] ? emulation_required+0x67/0x940 [ 1198.038360][T20057] vcpu_run+0x26e/0x740 [ 1198.038373][T20057] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1198.038383][T20057] kvm_vcpu_ioctl+0x565/0x950 [ 1198.038394][T20057] ? tomoyo_file_ioctl+0x1c/0x20 [ 1198.038404][T20057] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1198.038488][T20057] __se_sys_ioctl+0xcb/0x140 [ 1198.038503][T20057] __x64_sys_ioctl+0x3f/0x50 [ 1198.038515][T20057] do_syscall_64+0x39/0x80 [ 1198.038528][T20057] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1198.038537][T20057] RIP: 0033:0x45de59 [ 1198.038549][T20057] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1198.038554][T20057] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1198.038566][T20057] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1198.038579][T20057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1198.038657][T20057] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.038663][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 1198.038670][T20057] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1198.118183][T20065] fuse: Unknown parameter 'group_id00000000000000000000' [ 1198.252046][T14845] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1198.691792][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1198.702775][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.713865][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.723660][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1198.736713][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1198.745942][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.756166][T14845] usb 6-1: config 0 descriptor?? [ 1199.311809][T14845] usbhid 6-1:0.0: can't add hid device: -71 [ 1199.317761][T14845] usbhid: probe of 6-1:0.0 failed with error -71 [ 1199.328885][T14845] usb 6-1: USB disconnect, device number 114 [ 1199.991620][T14845] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1200.371835][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1200.382875][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.393839][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.403631][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1200.416628][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1200.425702][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.434329][T14845] usb 6-1: config 0 descriptor?? 11:10:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 11:10:44 executing program 3 (fault-call:5 fault-nth:73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x8}}]}}) 11:10:44 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa500000000000000) 11:10:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) 11:10:44 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7fff) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x107041, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x101002, 0x0) read$hidraw(r1, &(0x7f0000000340)=""/4096, 0x1000) [ 1200.867880][T20112] FAULT_INJECTION: forcing a failure. [ 1200.867880][T20112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1200.875795][T20119] fuse: Unknown parameter 'blksize0x0000000000000000' [ 1200.888017][T14845] usbhid 6-1:0.0: can't add hid device: -71 [ 1200.892475][T20112] CPU: 0 PID: 20112 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1200.895162][T14845] usbhid: probe of 6-1:0.0 failed with error -71 [ 1200.902538][T20112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.902541][T20112] Call Trace: [ 1200.902559][T20112] dump_stack+0x10f/0x19d [ 1200.902570][T20112] should_fail+0x23c/0x250 [ 1200.902629][T20112] __alloc_pages_nodemask+0xd8/0x380 [ 1200.902649][T20112] alloc_pages_current+0x21d/0x310 [ 1200.925840][T14845] usb 6-1: USB disconnect, device number 115 [ 1200.926542][T20112] __get_free_pages+0x8/0x30 [ 1200.926558][T20112] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1200.957425][T20112] kvm_mmu_load+0x7d/0x9c0 [ 1200.961822][T20112] ? check_preemption_disabled+0x51/0x140 [ 1200.967531][T20112] ? vmx_flush_tlb_all+0x4f/0x220 [ 1200.972648][T20112] vcpu_enter_guest+0x1c74/0x2660 [ 1200.977667][T20112] vcpu_run+0x26e/0x740 [ 1200.981845][T20112] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1200.987294][T20112] kvm_vcpu_ioctl+0x565/0x950 [ 1200.992015][T20112] ? tomoyo_file_ioctl+0x1c/0x20 [ 1200.997016][T20112] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1201.002903][T20112] __se_sys_ioctl+0xcb/0x140 [ 1201.007489][T20112] __x64_sys_ioctl+0x3f/0x50 [ 1201.012105][T20112] do_syscall_64+0x39/0x80 [ 1201.016546][T20112] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1201.022421][T20112] RIP: 0033:0x45de59 [ 1201.026373][T20112] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1201.046047][T20112] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.054439][T20112] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:10:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfeff000000000000) 11:10:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2}}]}}) 11:10:45 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) [ 1201.062395][T20112] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1201.070349][T20112] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.078305][T20112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 1201.086259][T20112] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:45 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) 11:10:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 11:10:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3}}]}}) [ 1201.155236][T20147] fuse: blksize only supported for fuseblk [ 1201.227207][T20162] fuse: blksize only supported for fuseblk [ 1201.421529][T14845] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1201.811434][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1201.822427][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.833553][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.843346][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1201.856386][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1201.865418][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.873975][T14845] usb 6-1: config 0 descriptor?? [ 1202.352716][T14845] uclogic 0003:5543:0522.0034: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 1202.553009][T14845] usb 6-1: USB disconnect, device number 116 [ 1203.331371][T25465] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1203.691303][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1203.702205][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.713815][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.723985][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1203.737345][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1203.746896][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.755984][T25465] usb 6-1: config 0 descriptor?? 11:10:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "161af4fe"}]}}, 0x0}, 0x0) 11:10:48 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) 11:10:48 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x3, 0x6}}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x2, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4}}]}}) 11:10:48 executing program 3 (fault-call:5 fault-nth:74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:48 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) write(r1, &(0x7f0000000040)="5ccdf0849ddaa9c8c24950733fb11f401b16a789009b08316a85efdb4c79cab9bb33b36d0c37aff9ed15a4372d9457651b1974d189faf9ad5f420bbf31c4def2d5777bfa2837486853eb1b52", 0x4c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x22c8}], 0x1, 0x403) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000002380)=ANY=[], &(0x7f0000000000)=0x1024) 11:10:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) [ 1203.913519][T20213] fuse: blksize only supported for fuseblk [ 1203.936579][T20214] FAULT_INJECTION: forcing a failure. [ 1203.936579][T20214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:10:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5}}]}}) [ 1203.961285][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1203.967397][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1203.968892][T20214] CPU: 1 PID: 20214 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1203.982527][T20214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.992564][T20214] Call Trace: [ 1203.995846][T20214] dump_stack+0x10f/0x19d [ 1204.000186][T20214] should_fail+0x23c/0x250 [ 1204.004594][T20214] __alloc_pages_nodemask+0xd8/0x380 [ 1204.009922][T20214] alloc_pages_current+0x21d/0x310 [ 1204.015023][T20214] __get_free_pages+0x8/0x30 [ 1204.018753][T25465] usb 6-1: USB disconnect, device number 117 [ 1204.019608][T20214] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1204.031184][T20214] kvm_mmu_load+0x7d/0x9c0 [ 1204.035589][T20214] ? check_preemption_disabled+0x51/0x140 [ 1204.041291][T20214] ? vmx_flush_tlb_all+0x4f/0x220 [ 1204.046408][T20214] vcpu_enter_guest+0x1c74/0x2660 [ 1204.051424][T20214] ? emulation_required+0x67/0x940 [ 1204.056551][T20214] vcpu_run+0x26e/0x740 [ 1204.060702][T20214] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1204.067019][T20214] kvm_vcpu_ioctl+0x565/0x950 [ 1204.071683][T20214] ? tomoyo_file_ioctl+0x1c/0x20 [ 1204.076645][T20214] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1204.082616][T20214] __se_sys_ioctl+0xcb/0x140 [ 1204.087193][T20214] __x64_sys_ioctl+0x3f/0x50 [ 1204.091766][T20214] do_syscall_64+0x39/0x80 [ 1204.096169][T20214] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1204.102080][T20214] RIP: 0033:0x45de59 11:10:48 executing program 4: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1204.106016][T20214] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.125628][T20214] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.134031][T20214] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1204.142068][T20214] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1204.143021][T20236] fuse: blksize only supported for fuseblk [ 1204.150024][T20214] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 11:10:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) [ 1204.150031][T20214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004a [ 1204.150039][T20214] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:48 executing program 3 (fault-call:5 fault-nth:75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:48 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x8, 0x1, 0x100, 0x9, 0xfffff568, 0x8000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1000}, {r2, 0x4}], 0x2, &(0x7f00000001c0), &(0x7f0000000280), 0x8) ioctl$KDSKBLED(r2, 0x4b65, 0x5) [ 1204.337853][T20248] FAULT_INJECTION: forcing a failure. [ 1204.337853][T20248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1204.373440][T20248] CPU: 1 PID: 20248 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1204.382114][T20248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.392153][T20248] Call Trace: [ 1204.395433][T20248] dump_stack+0x10f/0x19d [ 1204.399750][T20248] should_fail+0x23c/0x250 [ 1204.404233][T20248] __alloc_pages_nodemask+0xd8/0x380 [ 1204.409512][T20248] alloc_pages_current+0x21d/0x310 [ 1204.414625][T20248] __get_free_pages+0x8/0x30 [ 1204.419202][T20248] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1204.424847][T20248] kvm_mmu_load+0x7d/0x9c0 [ 1204.429251][T20248] ? check_preemption_disabled+0x51/0x140 [ 1204.434955][T20248] ? vmx_flush_tlb_all+0x4f/0x220 [ 1204.439987][T20248] vcpu_enter_guest+0x1c74/0x2660 [ 1204.445002][T20248] ? emulation_required+0x67/0x940 [ 1204.450106][T20248] vcpu_run+0x26e/0x740 [ 1204.454257][T20248] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1204.459703][T20248] kvm_vcpu_ioctl+0x565/0x950 [ 1204.464368][T20248] ? tomoyo_file_ioctl+0x1c/0x20 [ 1204.469295][T20248] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1204.475178][T20248] __se_sys_ioctl+0xcb/0x140 [ 1204.479764][T20248] __x64_sys_ioctl+0x3f/0x50 [ 1204.481195][T25465] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1204.484443][T20248] do_syscall_64+0x39/0x80 [ 1204.496413][T20248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1204.502286][T20248] RIP: 0033:0x45de59 [ 1204.506164][T20248] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.525748][T20248] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.534149][T20248] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1204.542107][T20248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1204.550064][T20248] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.558025][T20248] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b [ 1204.565979][T20248] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1204.911202][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1204.922111][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.933593][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.943826][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1204.957079][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1204.966367][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.975242][T25465] usb 6-1: config 0 descriptor?? [ 1205.452057][T25465] uclogic 0003:5543:0522.0035: item fetching failed at offset 0/1 [ 1205.459955][T25465] uclogic 0003:5543:0522.0035: parse failed [ 1205.466190][T25465] uclogic: probe of 0003:5543:0522.0035 failed with error -22 [ 1205.653072][T14845] usb 6-1: USB disconnect, device number 118 [ 1206.421074][T25465] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1206.781038][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1206.793111][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.804056][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.813903][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1206.826871][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1206.836079][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.844828][T25465] usb 6-1: config 0 descriptor?? 11:10:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x8, "96d9"}]}}, 0x0}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 11:10:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6}}]}}) 11:10:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7a72605e09baca9c, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x40000c0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0x4000400, "06ba1a69df7d53a1b3c0945dcc795d4fe7c71bea41737ce7c687417f63794e24", 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "2eb69bd8"}]}}, 0x0}, 0x0) 11:10:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20883, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="7910121091070d34f054536e6c694ad9c024f39464bbb271d4a4bce54bf0fb7b49a3ddfc4180b4820f6016fd92531e192d540d7b2fb4bc5067c0d210d1a29ce03e1fabb91e54d6ef638fb911890abdcf1c8363fa29de8809127eef7c51ac4548495e95b2f0e0e71c261233dc13f45b7ab9542b0184ddb5517a4d066eebc495fe1e8bb2bcbd4182ea2bd6a37e19578db7ddcc98d3a626a023d783e977154136145422351c7cf778f53584d96defcafce1bc76c1a1008f785cbe0bbc00fdd0f100100acdcbcef0f9459fd2df2524f142", 0xcf, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000140)={0x5, [0x80, 0x2, 0x1, 0x49, 0xfffa, 0xff81, 0x7, 0x86, 0x8, 0x1, 0x1, 0xbc6c, 0x6ad, 0x2c2a, 0x3ff, 0x3, 0x2, 0x8, 0xfa, 0x9, 0x1, 0x7, 0x7ff, 0xb8, 0x400, 0x2, 0xe955, 0x68, 0x7, 0x101, 0x6, 0x5, 0x1, 0x2c28, 0x0, 0x7, 0x6, 0x8, 0x1, 0x3, 0x9, 0x3ff, 0x7ff, 0x8001, 0x9, 0x1ff, 0x2, 0x1ff], 0x3}) 11:10:51 executing program 3 (fault-call:5 fault-nth:76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:51 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x80000001, 0x4) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000080)={0x70, 0x16, &(0x7f0000001340)}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$CHAR_RAW_IOOPT(r3, 0x1279, &(0x7f0000000000)) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1207.011505][T20300] FAULT_INJECTION: forcing a failure. [ 1207.011505][T20300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1207.028414][T20301] fuse: blksize only supported for fuseblk [ 1207.028680][T20300] CPU: 1 PID: 20300 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1207.042865][T20300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.052899][T20300] Call Trace: [ 1207.056183][T20300] dump_stack+0x10f/0x19d [ 1207.060583][T20300] should_fail+0x23c/0x250 [ 1207.060988][T25465] usbhid 6-1:0.0: can't add hid device: -71 [ 1207.064983][T20300] __alloc_pages_nodemask+0xd8/0x380 [ 1207.065069][T20300] alloc_pages_current+0x21d/0x310 [ 1207.081224][T20300] __get_free_pages+0x8/0x30 [ 1207.082473][T25465] usbhid: probe of 6-1:0.0 failed with error -71 [ 1207.085844][T20300] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1207.085939][T20300] kvm_mmu_load+0x7d/0x9c0 [ 1207.102229][T20300] ? check_preemption_disabled+0x51/0x140 [ 1207.107987][T20300] ? vmx_flush_tlb_all+0x4f/0x220 [ 1207.113014][T20300] vcpu_enter_guest+0x1c74/0x2660 [ 1207.118024][T20300] ? emulation_required+0x67/0x940 [ 1207.123170][T20300] vcpu_run+0x26e/0x740 [ 1207.127314][T20300] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1207.127857][T25465] usb 6-1: USB disconnect, device number 119 [ 1207.132754][T20300] kvm_vcpu_ioctl+0x565/0x950 [ 1207.132768][T20300] ? tomoyo_file_ioctl+0x1c/0x20 [ 1207.132781][T20300] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1207.132794][T20300] __se_sys_ioctl+0xcb/0x140 [ 1207.132840][T20300] __x64_sys_ioctl+0x3f/0x50 [ 1207.163392][T20300] do_syscall_64+0x39/0x80 [ 1207.167800][T20300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1207.173705][T20300] RIP: 0033:0x45de59 [ 1207.177647][T20300] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1207.197248][T20300] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:10:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7}}]}}) 11:10:51 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x56100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7, 0x0, [{0x80000001, 0x8, 0x72dd, 0x7dc5, 0x4}, {0xc000000e, 0x0, 0x3, 0x7}, {0xc0000001, 0x9, 0x100, 0x1, 0x8}, {0x80000000, 0x10000000, 0x8, 0x2, 0x9}, {0x40000001, 0x7, 0x20, 0x1f, 0x1}, {0x1, 0x9, 0x6, 0x3, 0xfffff000}, {0x80000008, 0x6, 0x3, 0x36, 0x401}]}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000140)=""/187) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1207.205639][T20300] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1207.213586][T20300] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1207.221538][T20300] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.229519][T20300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004c [ 1207.237468][T20300] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:51 executing program 3 (fault-call:5 fault-nth:77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1207.298151][T20326] fuse: blksize only supported for fuseblk [ 1207.311017][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd 11:10:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8}}]}}) [ 1207.346798][T20333] FAULT_INJECTION: forcing a failure. [ 1207.346798][T20333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1207.395500][T20333] CPU: 1 PID: 20333 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1207.399750][T20340] fuse: blksize only supported for fuseblk [ 1207.404179][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.404183][T20333] Call Trace: [ 1207.404200][T20333] dump_stack+0x10f/0x19d [ 1207.404211][T20333] should_fail+0x23c/0x250 [ 1207.404227][T20333] __alloc_pages_nodemask+0xd8/0x380 [ 1207.404241][T20333] alloc_pages_current+0x21d/0x310 [ 1207.404257][T20333] __get_free_pages+0x8/0x30 [ 1207.447001][T20333] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1207.452818][T20333] kvm_mmu_load+0x7d/0x9c0 [ 1207.457225][T20333] ? check_preemption_disabled+0x51/0x140 [ 1207.462931][T20333] ? vmx_flush_tlb_all+0x4f/0x220 [ 1207.467956][T20333] vcpu_enter_guest+0x1c74/0x2660 [ 1207.472971][T20333] ? emulation_required+0x67/0x940 [ 1207.478154][T20333] vcpu_run+0x26e/0x740 [ 1207.482300][T20333] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1207.487747][T20333] kvm_vcpu_ioctl+0x565/0x950 [ 1207.492412][T20333] ? tomoyo_file_ioctl+0x1c/0x20 [ 1207.497334][T20333] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1207.503250][T20333] __se_sys_ioctl+0xcb/0x140 [ 1207.507849][T20333] __x64_sys_ioctl+0x3f/0x50 [ 1207.512413][T20333] do_syscall_64+0x39/0x80 [ 1207.516897][T20333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1207.522806][T20333] RIP: 0033:0x45de59 [ 1207.526675][T20333] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1207.546250][T20333] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.554635][T20333] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1207.562580][T20333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1207.570526][T20333] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.578470][T20333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004d [ 1207.586413][T20333] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x9}}]}}) 11:10:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa}}]}}) [ 1207.596679][T25465] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1207.622931][T20346] fuse: blksize only supported for fuseblk [ 1207.694267][T20351] fuse: blksize only supported for fuseblk [ 1207.761292][ T12] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1207.777782][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.801807][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.856339][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1207.897996][ T12] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1207.926816][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.947743][ T12] usb 1-1: config 0 descriptor?? [ 1207.971311][T25465] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1207.990231][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.009920][T25465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.023584][T25465] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1208.036745][T25465] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1208.047514][T25465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.056361][T25465] usb 6-1: config 0 descriptor?? [ 1208.441863][ T12] uclogic 0003:5543:0522.0036: item fetching failed at offset 0/1 [ 1208.450319][ T12] uclogic 0003:5543:0522.0036: parse failed [ 1208.456468][ T12] uclogic: probe of 0003:5543:0522.0036 failed with error -22 [ 1208.551702][T25465] uclogic 0003:5543:0522.0037: item fetching failed at offset 0/1 [ 1208.559630][T25465] uclogic 0003:5543:0522.0037: parse failed [ 1208.565889][T25465] uclogic: probe of 0003:5543:0522.0037 failed with error -22 [ 1208.648420][T25465] usb 1-1: USB disconnect, device number 8 [ 1208.753862][T14845] usb 6-1: USB disconnect, device number 120 [ 1209.541667][T14845] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1209.950819][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1209.961693][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.972580][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.982357][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1209.995312][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1210.004620][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.014257][T14845] usb 6-1: config 0 descriptor?? 11:10:54 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "bc3e93ce"}]}}, 0x0}, 0x0) 11:10:54 executing program 3 (fault-call:5 fault-nth:78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xb}}]}}) 11:10:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="e0120000bb90c7211ace066fd385c22023bf71338575c606374a62fb23ed1b28489f68ad084c6d652220d2ad314c272d132641cc460e8051", @ANYRES16=r4, @ANYBLOB="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"], 0x12e0}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf0008000000040009805c000280080001000900000008000100090000002c000380080002000000000008000200000000000800010006000000080001000500000008000200d27a00001c00038008000100020000000800b329b6000000080002008b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000140)="8c6d6abc6552e758c679b941439b4c62f2ee8f5875b3a39a7d7b22d2ef54cda74fd2f178067ea6d2c08939a4fbf598d167cdc5f011aa39e06340147b5ecf2980b260dc48a76cc537dcfe5411c2dc9155c1d4738e3b5361687d7291131ba897f4801b1f6ccd0a2af2194aa5c1b2e9774938d58f56a01b7f70008e6fe1303eb7f32a1708f29cf6d31b5b400fbbc2815f328daa8c0ea6c606d583d3ae293fd6f4518acbb82670fef201de5b3876bcbe394876961a03085efd9324bce828f47c3154233e854b87a2431bb0df675b4f3e4d18c1bd282c4cee113809cd917932cf06ef2a751942bd5fac6810020e1c11cb7aec25", &(0x7f0000000240)=""/113, &(0x7f0000000340)="a3258c39755d5d39ba9d72d2f3741c768b6fdafb75fc58b52d2f7587dd4c5b72febde1ccc05f2dcec4899f3944d0e96297456167eba8ecfce8e3a68399b53df317ddf379727ca4a82780b6e9a5684393d93ff7de5b624d8b965bb60fa7d58cf98da8b8ebd6b4c73ec5d93d4bc357928000e04f042e84356d50449e66c3478a3a95eca25a", &(0x7f0000000540)="9a47c6684f42e881dc4f5e068167d8bbaa0c92051308a03aab59df36e427451e24e0be9e75665dc29b6880ddb50ffd1885021d302c0e41ea23dd8dea3d1f54644e30fee20b407776bb7d9a82e2ace50577b9fcbf075defa38f0cb78e03f657df23eafbe979256693c48b9cbc44cc8909a781c29a809108d8ef8e2a7173e30e8f5046f2984c280c02790ce0ab732f314713602b4ac04f", 0x3f, r2, 0x4}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:10:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20883, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="7910121091070d34f054536e6c694ad9c024f39464bbb271d4a4bce54bf0fb7b49a3ddfc4180b4820f6016fd92531e192d540d7b2fb4bc5067c0d210d1a29ce03e1fabb91e54d6ef638fb911890abdcf1c8363fa29de8809127eef7c51ac4548495e95b2f0e0e71c261233dc13f45b7ab9542b0184ddb5517a4d066eebc495fe1e8bb2bcbd4182ea2bd6a37e19578db7ddcc98d3a626a023d783e977154136145422351c7cf778f53584d96defcafce1bc76c1a1008f785cbe0bbc00fdd0f100100acdcbcef0f9459fd2df2524f142", 0xcf, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000140)={0x5, [0x80, 0x2, 0x1, 0x49, 0xfffa, 0xff81, 0x7, 0x86, 0x8, 0x1, 0x1, 0xbc6c, 0x6ad, 0x2c2a, 0x3ff, 0x3, 0x2, 0x8, 0xfa, 0x9, 0x1, 0x7, 0x7ff, 0xb8, 0x400, 0x2, 0xe955, 0x68, 0x7, 0x101, 0x6, 0x5, 0x1, 0x2c28, 0x0, 0x7, 0x6, 0x8, 0x1, 0x3, 0x9, 0x3ff, 0x7ff, 0x8001, 0x9, 0x1ff, 0x2, 0x1ff], 0x3}) 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc}}]}}) 11:10:54 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x1) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000002980)=0x25b, 0x4) pipe(&(0x7f0000002c80)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000002cc0), 0x8) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000029c0)=0xffffffffffffeb2e) r3 = syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x1, &(0x7f0000002640)=[{&(0x7f0000002540)="57e54cbc90e2786dbe910e020451ef01471a6c31496d639c54347430ebbd469b9cf16994e8925ba6e422a1e38eb34c2050b543ef5b106bdb5342b712330e6de50b1b5d1b96d99857f91d6107b8ebe51f4858cf5bf4b8ee970eee1af43bcf29dc0ce1fdde1270fa8b925fd73c7a2f5574244bc490e2131f491c0bafebfd5b54fa7bd6c81ce5ee26159ce5fe74623a57d755588aea2a5a43a7cef7b893df5cd6ab82333ce2b3ecf6058fea093e69861f97011ab6e0e91b9fef957686023dece790ab723f2b07c3ef84bff02b65ccecc044f54c57ba29434a68ace2e55db49dcf9a445f8f8b64bd1080da274dfa08878e55180aaa133bcad7", 0xf7}], 0x20040, &(0x7f0000002680)={[{@nodots='nodots'}, {@fat=@tz_utc='tz=UTC'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@quiet='quiet'}, {@nodots='nodots'}], [{@smackfsdef={'smackfsdef', 0x3d, 'system.posix_acl_access\x00'}}, {@permit_directio='permit_directio'}, {@smackfshat={'smackfshat', 0x3d, ':!\xef'}}]}) statx(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sched_rr_get_interval(r5, &(0x7f0000001440)) statx(r1, &(0x7f0000000200)='./file0\x00', 0x400, 0x8, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002900)={0x5, 0x0, [{0x8c6}, {0x83a, 0x0, 0x5}, {0x329, 0x0, 0xb1}, {0xc0000083, 0x0, 0x5}, {0x0, 0x0, 0x2}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000001480)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="040004000000000008000600", @ANYRES32=0xee01, @ANYBLOB="080002b49a616b3f60a49700296536a87e9d5a81da7c47", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000000000000000"], 0x64, 0x2) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/96}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002700)='/proc/self/net/pfkey\x00', 0xc02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000002740)=0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000001500)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000028c0)={&(0x7f0000002780), 0xc, &(0x7f0000002880)={&(0x7f0000002a00)=ANY=[@ANYBLOB="0100009b00f5af9c519fc964cb00", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf25020000000800010002000000500008804c00078008000500afb155560800060075000000080005009d520d4a08000600b700000008000500b528154f080005000331be5108000600bd00000008000500938bb33b08000600010000002400048005000300050000000500030000000000050003000200000005000300010000000c000480050003000000000008000200030000000800010003000000"], 0xac}, 0x1, 0x0, 0x0, 0x24004815}, 0x4008800) [ 1210.127226][T20418] fuse: blksize only supported for fuseblk [ 1210.145051][T20419] FAULT_INJECTION: forcing a failure. [ 1210.145051][T20419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1210.202378][T14845] usbhid 6-1:0.0: can't add hid device: -71 [ 1210.208324][T14845] usbhid: probe of 6-1:0.0 failed with error -71 [ 1210.227018][T20419] CPU: 1 PID: 20419 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1210.235682][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.245812][T20419] Call Trace: [ 1210.249094][T20419] dump_stack+0x10f/0x19d [ 1210.253415][T20419] should_fail+0x23c/0x250 [ 1210.257823][T20419] __alloc_pages_nodemask+0xd8/0x380 [ 1210.263105][T20419] alloc_pages_current+0x21d/0x310 [ 1210.268205][T20419] __get_free_pages+0x8/0x30 [ 1210.272780][T20419] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1210.278399][T20419] kvm_mmu_load+0x7d/0x9c0 [ 1210.282800][T20419] ? check_preemption_disabled+0x51/0x140 [ 1210.288502][T20419] ? vmx_flush_tlb_all+0x4f/0x220 [ 1210.289702][T20433] fuse: Bad value for 'fd' [ 1210.293570][T20419] vcpu_enter_guest+0x1c74/0x2660 [ 1210.293583][T20419] ? emulation_required+0x67/0x940 [ 1210.293604][T20419] vcpu_run+0x26e/0x740 [ 1210.312226][T20419] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1210.317682][T20419] kvm_vcpu_ioctl+0x565/0x950 [ 1210.322346][T20419] ? tomoyo_file_ioctl+0x1c/0x20 [ 1210.327276][T20419] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1210.333155][T20419] __se_sys_ioctl+0xcb/0x140 [ 1210.337728][T20419] __x64_sys_ioctl+0x3f/0x50 [ 1210.342307][T20419] do_syscall_64+0x39/0x80 [ 1210.346707][T20419] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1210.352634][T20419] RIP: 0033:0x45de59 [ 1210.356515][T20419] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1210.376192][T20419] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.384578][T20419] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1210.392586][T20419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xd}}]}}) [ 1210.400644][T20419] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1210.408591][T20419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004e [ 1210.416545][T20419] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1210.432231][T14845] usb 6-1: USB disconnect, device number 121 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe}}]}}) [ 1210.503347][T20450] fuse: blksize only supported for fuseblk 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x10}}]}}) [ 1210.579966][T20455] fuse: blksize only supported for fuseblk 11:10:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x11}}]}}) [ 1210.645256][T20458] fuse: blksize only supported for fuseblk [ 1210.746892][T20464] fuse: blksize only supported for fuseblk [ 1210.812189][T14845] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1211.230664][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1211.241778][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.253737][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.264051][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1211.277263][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1211.286436][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.297129][T14845] usb 6-1: config 0 descriptor?? [ 1211.782976][T14845] uclogic 0003:5543:0522.0038: item fetching failed at offset 0/1 [ 1211.790909][T14845] uclogic 0003:5543:0522.0038: parse failed [ 1211.796800][T14845] uclogic: probe of 0003:5543:0522.0038 failed with error -22 [ 1211.982369][T25474] usb 6-1: USB disconnect, device number 122 11:10:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x12}}]}}) 11:10:56 executing program 3 (fault-call:5 fault-nth:79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:56 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x161bbb3b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328b40c1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26c638fb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x40, 0x3, 0x1}}, 0x14) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) write$fb(r0, &(0x7f0000000100)="63835b04edd2c87f2112e176785322b75d60b69e1e86d279d4103455bb5544999eb75a7994481ff101e4992d371cebb3b5d94953d18ee17ac19e92046d2698c08e0e4dcc62b6bbbe8ad8a6690b4918d5c9e33dba670c5b28ac0cbf9cc71a25e50b2da0f3b1ea2ee8776b4c490f29c7cbaf43cc8f19b8e61e43e791cf91de4954c8a91b987671aaa4a62cfe4061c369f2509f75d75677df8a2f18cf875a4797592b8d05234fe1bb2884bb8ab3a4d81e14e4a3ac5a078b65e056ed", 0xba) 11:10:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 11:10:56 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:56 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2e, {0x2a, 0x0, "ed2c276c606816a53a088057433f7271198dabceaa0d01d77a574f92f9000000887e3101751164c7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000280)={0xa0, 0x2c, 0xcf, {0xcf, 0x21, "a42002affe8abd6954574424b45ecba2fa8ea45d8ee98f39af39e396230623c137fc8c5b68ecc7ca7289e23f7b10d5c79996418d6c518c4e6fb2a53ebdf798e32bd4582834e3033d297f33fe90f274d3003379716d2408172750f016f95365ddd0a3ad3a5f416201454e709554c11268e3542afb1ecc4387708633a3d02f73c9a14ad8fb1500aca072ec7a0345aaef02af538b649c378cefbfd28e304209b054bb0e3e7f108ea2967b99328ac64da16e38ea2d7c8203824ad047e48afaa29972164acd223104a182749118b541"}}, &(0x7f0000000080)={0x0, 0x3, 0x31, @string={0x31, 0x3, "73ccccdb60265474c2aa7aa3a6c1f6a217574e994166305b46188214115b56875385e47f0ea41adfe96f3e1b6a5488"}}, &(0x7f0000000380)={0x0, 0xf, 0x9e, {0x5, 0xf, 0x9e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xbc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x7, 0xda}, @generic={0x81, 0x10, 0x4, "2c40b28d4bdd61506528819ecee2f43a97517c87d7e5993caacf7ef7811872d035806e5d536a590f52031fc5bfe18b8b6c3e60a14b0c15237abac7a441804b25e744cc039f1e71bb7286e4b1b8ef25b0d1c6d0f38716d863fe198a7f2655a69cc97c568d1b5c2fde5142d32c2462a428896aa9d2268e0e08794f9fb03654"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x20, 0xfd, "737df7e2", "fac16e40"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x88, 0x8, 0x2, 0x0, 0x4, 0xffff}}}, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x40, 0xf, 0x34, "f079fc09fdde9c722556b5fdad226da3225d6803b26cffdff6a158cff97f9e5e81361c8a490bba33e31524f4c8d62cd8540ff35b"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3d91"}, &(0x7f0000000600)={0x40, 0xf, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a4ed"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xea}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1}}) preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000000)) [ 1212.555241][T20504] FAULT_INJECTION: forcing a failure. [ 1212.555241][T20504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1212.558926][T20507] fuse: blksize only supported for fuseblk [ 1212.569231][T20504] CPU: 1 PID: 20504 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1212.583065][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.593103][T20504] Call Trace: [ 1212.596384][T20504] dump_stack+0x10f/0x19d [ 1212.600708][T20504] should_fail+0x23c/0x250 [ 1212.605167][T20504] __alloc_pages_nodemask+0xd8/0x380 [ 1212.610448][T20504] alloc_pages_current+0x21d/0x310 [ 1212.615582][T20504] __get_free_pages+0x8/0x30 [ 1212.620170][T20504] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1212.625790][T20504] kvm_mmu_load+0x7d/0x9c0 [ 1212.630323][T20504] ? check_preemption_disabled+0x51/0x140 [ 1212.636032][T20504] ? vmx_flush_tlb_all+0x4f/0x220 [ 1212.641109][T20504] vcpu_enter_guest+0x1c74/0x2660 [ 1212.646119][T20504] ? emulation_required+0x67/0x940 [ 1212.651301][T20504] vcpu_run+0x26e/0x740 [ 1212.655451][T20504] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1212.660902][T20504] kvm_vcpu_ioctl+0x565/0x950 [ 1212.665739][T20504] ? tomoyo_file_ioctl+0x1c/0x20 [ 1212.670746][T20504] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1212.676625][T20504] __se_sys_ioctl+0xcb/0x140 [ 1212.681223][T20504] __x64_sys_ioctl+0x3f/0x50 [ 1212.685811][T20504] do_syscall_64+0x39/0x80 [ 1212.690289][T20504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.696212][T20504] RIP: 0033:0x45de59 [ 1212.700093][T20504] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1212.719692][T20504] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.728117][T20504] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1212.736580][T20504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1212.744524][T20504] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 11:10:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x4, 0x2, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:10:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x25}}]}}) [ 1212.752466][T20504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004f [ 1212.760456][T20504] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x48}}]}}) 11:10:57 executing program 3 (fault-call:5 fault-nth:80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1212.820057][T20532] fuse: blksize only supported for fuseblk 11:10:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4c}}]}}) 11:10:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fstat(r0, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1212.871294][T20542] fuse: blksize only supported for fuseblk [ 1212.943455][T25474] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1212.943933][T20549] FAULT_INJECTION: forcing a failure. [ 1212.943933][T20549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1212.951679][T20551] fuse: blksize only supported for fuseblk [ 1212.964652][T20549] CPU: 0 PID: 20549 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1212.978957][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.988991][T20549] Call Trace: [ 1212.992295][T20549] dump_stack+0x10f/0x19d [ 1212.996616][T20549] should_fail+0x23c/0x250 [ 1213.001051][T20549] __alloc_pages_nodemask+0xd8/0x380 [ 1213.006330][T20549] alloc_pages_current+0x21d/0x310 [ 1213.011430][T20549] __get_free_pages+0x8/0x30 [ 1213.016011][T20549] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1213.021641][T20549] kvm_mmu_load+0x7d/0x9c0 [ 1213.026044][T20549] ? check_preemption_disabled+0x51/0x140 [ 1213.031746][T20549] ? vmx_flush_tlb_all+0x4f/0x220 [ 1213.036783][T20549] vcpu_enter_guest+0x1c74/0x2660 [ 1213.041807][T20549] ? emulation_required+0x67/0x940 [ 1213.046914][T20549] vcpu_run+0x26e/0x740 [ 1213.051115][T20549] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1213.056558][T20549] kvm_vcpu_ioctl+0x565/0x950 [ 1213.061292][T20549] ? tomoyo_file_ioctl+0x1c/0x20 [ 1213.066214][T20549] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1213.072092][T20549] __se_sys_ioctl+0xcb/0x140 [ 1213.076670][T20549] __x64_sys_ioctl+0x3f/0x50 [ 1213.081275][T20549] do_syscall_64+0x39/0x80 [ 1213.085679][T20549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1213.091589][T20549] RIP: 0033:0x45de59 [ 1213.095480][T20549] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1213.115068][T20549] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.123466][T20549] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1213.131426][T20549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:10:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5c}}]}}) [ 1213.139379][T20549] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.147339][T20549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000050 [ 1213.155292][T20549] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:10:57 executing program 3 (fault-call:5 fault-nth:81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1213.256402][T20567] fuse: blksize only supported for fuseblk [ 1213.300895][T20570] FAULT_INJECTION: forcing a failure. [ 1213.300895][T20570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1213.344909][T20570] CPU: 1 PID: 20570 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1213.353580][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.363619][T20570] Call Trace: [ 1213.366943][T20570] dump_stack+0x10f/0x19d [ 1213.371265][T20570] should_fail+0x23c/0x250 [ 1213.375677][T20570] __alloc_pages_nodemask+0xd8/0x380 [ 1213.380950][T20570] alloc_pages_current+0x21d/0x310 [ 1213.386050][T20570] __get_free_pages+0x8/0x30 [ 1213.390683][T20570] kvm_mmu_topup_memory_cache+0xae/0x140 [ 1213.396305][T20570] kvm_mmu_load+0x7d/0x9c0 [ 1213.400705][T20570] ? check_preemption_disabled+0x51/0x140 [ 1213.406410][T20570] ? vmx_flush_tlb_all+0x4f/0x220 [ 1213.411419][T20570] vcpu_enter_guest+0x1c74/0x2660 [ 1213.416429][T20570] ? emulation_required+0x67/0x940 [ 1213.421536][T20570] vcpu_run+0x26e/0x740 [ 1213.425823][T20570] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1213.428678][T20577] fuse: blksize only supported for fuseblk [ 1213.431271][T20570] kvm_vcpu_ioctl+0x565/0x950 11:10:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x60}}]}}) 11:10:57 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:10:57 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='2', 0x1}], 0x1) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) [ 1213.431284][T20570] ? tomoyo_file_ioctl+0x1c/0x20 [ 1213.431298][T20570] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1213.431310][T20570] __se_sys_ioctl+0xcb/0x140 [ 1213.431346][T20570] __x64_sys_ioctl+0x3f/0x50 [ 1213.461662][T20570] do_syscall_64+0x39/0x80 [ 1213.466061][T20570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1213.471934][T20570] RIP: 0033:0x45de59 [ 1213.475875][T20570] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1213.495466][T20570] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.503859][T20570] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1213.511816][T20570] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1213.519773][T20570] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.527732][T20570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000051 [ 1213.535690][T20570] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1213.600430][T25474] usb 6-1: Using ep0 maxpacket: 16 [ 1213.750819][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 1213.767315][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.791939][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.814696][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 1213.828223][T25474] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1213.837651][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.847519][T25474] usb 6-1: config 0 descriptor?? [ 1214.320879][T25474] cypress 0003:04B4:DE61.0039: ignoring exceeding usage max [ 1214.336999][T25474] cypress 0003:04B4:DE61.0039: usage index exceeded [ 1214.343609][T25474] cypress 0003:04B4:DE61.0039: item 0 0 2 0 parsing failed [ 1214.351051][T25474] cypress 0003:04B4:DE61.0039: parse failed [ 1214.356982][T25474] cypress: probe of 0003:04B4:DE61.0039 failed with error -22 11:11:00 executing program 5: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x7fffffff, 0x3, 0xb4c}) 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x68}}]}}) 11:11:00 executing program 3 (fault-call:5 fault-nth:82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x8000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xd6, 0x400}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:00 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "56e59cc113eb1f1175882e56d30abab1847d54fd6af6f14ade2820bc782810016ad9959a8450283248ac1aaa149c27a726e1db165bef00bb5d6a09f8e6135cd8fb2df147ec175f2fa8d72076d9f9812b7908e803f285c7fc6b9995f3094094825e458136a4b75e8f40ca83b0d82ca5b1620336f15a88a6ae1b9f66aedd6ae71e855f6e69ff07c8c3f3aa2b11fd6d2b8ded3da68f84c1dce8d81d23d6c22e346445e43bd957137ad8246255faa1e09e80af24d7cef5a5541f22952646d93090fa2b8ae11b0aa14d47c09253554b3662ff67d43532ce0d1d714a52513aaf377ddce503d2b73e41826a6f2c6b46b9c37779dc335d542b55cd4fe6a679fe99e7888bbf70da6590d4be6a511d21f0b38c388216f7b0e9b48e60bd3ed0bb3c479aca14eb7a1982a3f92d5e95a41a2ba74dd07cb96f3c06604943ede54fc177bc9ad448f63caac6da283eedeed03e5faae60bfa43ba70d98f6f4a552f14be02143853e061fa08ae6e1be141b661f8b74c0625b1b4fccd4225f0a8e0324b1ebe6a154c44a1bf5c8906c3e6512778f18e6294a8c4ad9ae4a2d861674cf307971a22c93a465c19e08ab9bedee86fc2bc5342ae16f0ce4cdcc8f43a9c81dbec2126c260faccda4ab069a6887c3f7dbb3961abc1f93ba5e28255cb36e521a91adf5569a8a86fafd56d6a9b822e07a001baf99e8b8f126793cce791d69aa6762bc08cec2d38b7b825bcb8c038e2188b9b5c95b3e740eb35ca5e67bfb508c1a6f00af4b2cd84db7a7729067f3f141091984511f553dc9737d970163479a1ecda450f71640d706a2eac231a4878b8096d2136f6060feb01926719322ebf975804ee71b029a4a962e0e07c83c4ae80bfde5e6a910ccee9d75db5f872a46065bf6ad61d70df5c088f8a499651924e22f08c4cf5325b91bd72257cd5b778077f43bb3070d7a2bf6ca3f29ee1d0ba38900f23147d7114a3f5b34f451cd30f80ba4a8104b6c593d63075355082807f52cadc4b5f9df95267125dd0113c0bf24d3698dee36917cc93e07f9b134c825c94f9d8ccd52cdcc2953696ac5564f22c786a0725c4d77c27d3efd5f6a26d24fa0bafbf08cb25616c8baee8dc8ff3b25e145804adb2e235c544e16b7617e669080cfcc853f945552a15ccecb0afaaf7149db15f62e3d3f549732fc19b0a91af58b7e41018458cc934db874d9d8c014e7016c89fb0e61fd0de8f9aaa726dcda907ec29e97626de253c6126c05990c93011246cbf90999ab22cd6e3d55176389b6cd2befa648501c5bdb0d8c1fec650f79bd53c07404ec3b2cd30dab3afd042afe0b7f46d13fa8f1abeadb9b05e62787140048dc024e21691a9678356ae57f48aeff0c270ab7abb02cbb988e5720293a8712832fc276a1e070f9eacb31c2c9a42cfd89f5d10cf71cbab74588d1980b625e3c4e0eddf63f04ea5fcdc92"}, 0x418, 0x2}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:00 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x1, 0x83) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000001340)={0x1818, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x169, 0x62}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x294, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "ae28bcd288e402005bf9d7463a392b8549f04e608610b9f375c37ac7885cd466408af1ab168a99fe9adaf656d121bc72929731e89573f5660abf116bcddcb9f3c1d194b6996fb98cec1e0d9ac7873e2302ba7625b594bce3b0822df3e0a773c072b7fdfb791516bfb5453e1844561953ce375e67630cc74b53837af644a99d6ae497b439d070ff5d1ccb49acf553401066f34dde05c311ded9091547bbe132e14bf800546ca88ab868aeb0703530f912814bd39b9da0e8730987e2a03371b7f22f10b4a5edad6393"}, @NL80211_FTM_RESP_ATTR_LCI={0x56, 0x2, "63e35bf283a1b9faf4e70597d9dfd593b691f43c1bc70ec68cb06c0855fe8f4c11298f97b7354f51fe354b334d89ac0e0ede9d5ac77396d450b4fc00aa68f492fc36050bfda4861ce4721a8b9c29d9f407f5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb3, 0x3, "d17b79fe953b0db9b58dc3ab70a4969a2946204985710b4ab652ee8bd54ba87cbf9ef231daab3d520cf27adca74a309048e2bff0f12cf11347e637e8058c1bef9bc00af57bdb51b94798d75c48db9d179df44d81f616c967d095e7290395ff39b798cd56685e0617f8276123c9140777f8b37911440aaefd39f94aecc75380e33e75a29530eebf642ae9e1cca68f5ea4a67c4a074946bbb5547fc1b78dbd01a58336c317c0ba280c518aa10e024c06"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "39a58c42efb0cf89ea53f85c5dd1e424f33b29f47e798e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c, 0x3, "7ba13ac2649656ab07835d38abeb2fc3c5fa1aad8ac835b168c7ebf74a60d6b52df5de00573e47a687a3d33d71a1f46e45a64161832b4713995f30f6ade18bc0b63c848e65d3ece5fdd2c03bad058737c2f542c109bf72ca010f45756f9c36dbf59cbc98c6411bba1a36af302f3290a4db97362b651c9890d686498c9cd5e2108385bc043726208723c8085f65361638cf43d7c83786d963"}]}, @NL80211_ATTR_BEACON_HEAD={0x3cd, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {0x8, 0xa9}}, 0xff, @random=0xfffc, 0x402b, @void, @void, @val={0x3, 0x1, 0x38}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xaf, {0x66, 0xad, 0x4, "f6db1ffbd9945e384aa79a4e1e42ba64c11d6dd9a4adf46407c9b2b752bb21a3990a458c376689f9061f8617f539bd3c50b4273ebd3a91f7c90b3a13da77fd7b7db507108cab3bd36a0f7eefd0179e1024c882db4ac05132dba004b12ac37720c618db354c14a5aa2f78c1101f6c121253836ed03c6d515b0f19c0cabdedb3e333946c9efa8e7d368254b4e212eed8c8ee0264ba15c89393f4338aff8847b28595a0400af3cda3c3d5c3b39d"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x7f, 0xffffffffffffffff, 0x1, 0x7, 0x63}}, @void, [{0xdd, 0xb0, "5ccb22500b62c35a6fcc5c72c46973319e3783ec1f03574395aad27222f5998594c35ade2a12c240e9b836ca25e0805cbfd30d9803ce9faa312205ffdaedb3fcbb6f01cd85bc08b705c906d810bfcd3c20767e28b9a05cef716afec499564dd64082eb5171da443c6680ab7283791cb1c72d079893a7269ea9d3b0b6f4cf1aa482c63f2cc516bea284b8dad73477d4574ca4882fb0cb5140a302cdbb44d06f3d83717f5b0bee19bab76ba9de6d45ea03"}, {0xdd, 0x89, "56a078e300eb64efc50249209c4d7b38f5b481d76fcfd1960a5e53bd14cb44b99cf058d8d42716e7cd334eef104e998ab4d4a576cf2b0291a9a8273a6b38dbd34956a86a1f699bf8ccd43baeb64bd622a9921e10a22f6b9489ae7563e9913485615e10c589d0a5efb2ba972579e6b48c5c212c903ce13e8dd020b1a3fe5ccb29410a0ae6314b292eb0"}, {0xdd, 0x9c, "63332a1a39aa74c2fd520918e01fd6c6475bf4b9a868d3da4a726a8b2345ea647a30857e48da70f217111503090a258eb35f3a890ad788cf7ef9a2d16099c1365643bef713d2a7829d9b255166be045cc5e055304eaab4e6d64195dca25a0fc295a87f7f283361f514b8c4c8e6977a1d84e32ea1f71c1c0d86cccabe2c4c3e815754aaa39b176b35d1b4cf988332a043af1983fd8daa9693c54897bf"}, {0xdd, 0xe0, "6986a85e38ec27efe11f87acac880d3d42bdb3126f4d6871c550a283264af7d794be6909bf47f5317348eb6695e2873972f120fdb3db487b137e0c21b74f3ecda0e54a5062a8fd732d2277a7fedb1d0ae2da3214dc26400436561bc9d437224e228fd8d698c116f64fe68938364ab9ef4e2fc4539daaac789a0adbbc999d79407723127d45c50a2b2d4a17cfdd508cb91b03b2b3729d4b32b488c1e38726fea3aa2277b919b31c9ac9b936306df641191ef6295057fae27251b3c0a0242c5372001834e123b50ab36cec9f476ded62274be20b27a839c99051677fb688613ce4"}, {0xdd, 0x22, "ce7f13d161587406783c41a668ef48855c4337433d09dfa465868c534c45c67558b0"}]}}, @NL80211_ATTR_PROBE_RESP={0x48a, 0x91, "6ef3104470b62a318de9b7783084225468f1597d7bc62f326d7a3b822b7cbb4b629490e1dae352eb6060bfd8325fadda2b972ba8d6bf6d59f3675d1feae24fa32b16a2fce26b2904ed5200d54855385f7531290d1a3074bdc9b1ccb6d36258ad737d5f5cba5b6bab20ee698115b98181050a8668a59905e6fd2fc8bc1bca7570464712dc29095798dea4d5d0b5fdef068298e7b23301b83f0f93c9db6f95c64eb4a8d7a2a107eea1fa24be03cb14e364e01b5ef57d51204489026fa470a4bcd88144021ab95b0dee8a8b88e5fede562a6bb3d7c7a27c68896f83aabca7627c83c09387ca98b09890d9579ca0df5217d8d9d503dcbf33077c7015dec5dba505f5cb4490af11251ba5a65a778b3f7aae5ac4c803d2d91835aa5ac14aad8de849ea3a006b76015ef5d02a8a974908f8477978afd211392f8ef68777cbf5a9e62e455e5e386f57ef436ae79dfef1e5327a0e3c9b2f0c828aca62f01442e2f5cf02e4e7826f6ccacd43e30a3123910775e67ff86a54f41a24652af2151fddc9001f17648d44f95ac696b9c245aadc3a28eb2cbf8415b2c17459ba40dc1703f32da5eee29fa2c98d651694654f9700328a5f9b86d6f6fa327add8662111a0ee9544d19af9a0aac2441a5bdee367a09af4b615575fa84793dccd952b395b6b62f16ad347bf86cf2ca542fda27bab55e44694604a9bf3632ed0f69b244f6f2655a158284ce1aee22d2e9835f7753882f799b452a211fb691c846073f5bb10ee377dec21b4827f04fb5e53fdee323519b150d9fd24c77e4bbd4082d75e4fbebf0be0f7083bb1e18c25abf8bd12dcab5d4d54e4cb4d1b1aa7d35cc47f32d8b06380a6254e8024cdf9fc2adbc584ba88d726717236bd540ffea32fa00b15e46b34e0ec2c04813884c2fd76c0fc58ab2ee513d76db4bae90351bb8c72089211f6594be89cb17426280f81eeb78460d41b25f582b8c1a1f0cadbcfa0122df4632066a628a37d219e632b1569d25fd75cc9230c76bd653243603b0452a27a2edb7f295d324bca79d88d7ad829565b8f689656cb31f1d2fcc63aa9ff482933e6df09524f40bb7faac8061d839dcb064d602fabd7a3d7a639f2d0f6c73f32d0d61e6f8f8d43674c76e243970edd53491cae4960cc2ce092dce1fee92cb1d6faf618ddff9fe91906065d4417d6b6d9806cc809cca42d5e74958bffbd7f5623cfbe70c909179da4418f96261bca35172ee4ea51745b2b8bd19b1061fb9b7f857161a96551b5bb0025e6b41b6014827cb2a3bf590bc46553c39f8e59a865e6663963d55a897386bbb39a9e7008c0afc32072720104ac7389808b2726f0383e84e695b5023a82f5b10739d8f78788a3ee52d1169c40ddf490a2f3d6eda4dd5bbc7181295a95b30e7833be0682f5d76dce3eae897932dbebf517b2bb33a9922db50a6950e8c5899590dffcf6e2d37050a17f88e05f1c7ae54a73ed1a37b935217631275f011e312c85629fdaada34ad19b11c43dcf0a744358ceac1f29d773dc627e726819ac622700284263b12b9e6faf7966916ec23624596391f9b072f8cd51fdcfdbfe5f6e0c45ab66347e1cec179c2b44e6f3c092cbf046637aff32a02aa90cda05c898f2475d30540a155d59ef7"}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@challenge={0x10, 0x1, 0xf3}, @supported_rates={0x1, 0x7, [{0x3e}, {0x6c, 0x1}, {0xc}, {0x18}, {0xc}, {0x2}, {0xc, 0x1}]}, @cf={0x4, 0x6, {0x3f, 0x3, 0x9, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x38c, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0xb0f}, @device_a, @device_b, @random="7814d8de0720", {0x7, 0x5}}, 0x3f, @default, 0x9044, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0xd4, {0x6, 0xa, 0x6, "c2ee86249b46681040a086728a7120e0ff363b5bb237684b5d2ea2a2252f3321f20da738c9196430fcb85ae72418cd69f9a17c692fc2f12824b20031b753e79d5882e51f9cf184a4582a9c19f04d100787cc413d06aa730bd36b35d2a1744bc92a08555b3066031e3bc2b131276b9ec2d23db52b390581fe280cda8a035211fc181d7bbea774981f528e46dd19cba28ee4589e8c251a99f38b4f928a064dae2e41d3037dae0bef9d40959911bc83f4b5651e56fbc6efa24f9d5d16652ffe512a8cf891276d886351c1d223fce38f5ed0fc"}}, @val={0x25, 0x3, {0x0, 0xa1, 0x8}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0xa5, 0x9}}, @val={0x2d, 0x1a, {0x10, 0x0, 0x3, 0x0, {0x100000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x9, 0x80}}, @void, @void, @void, [{0xdd, 0x8b, "d8fbb0645c90d4c9e47712b1189ae19a8f3a9880a7707674f749eac101448fc661d12c19be12878224f6a7386fecdb521f544db60104329aab4757e651addcb2d2f27fa4731c32327d01fce1d3b831bb7d35470facebe71c177f5f6d826d14657096aff0067b4dae362e67405561cac17ec271f02f7aceefcdb10b0f0d4a5d28546f365ef504ef12677784"}, {0xdd, 0x21, "c9f361b81bba5bb05ab48905b65c1ebb305c9be269ac1b2149ec683c4109fcb09d"}, {0xdd, 0xac, "1ad05d977d153b06453f6d472eb707ca2a774304e326ffdd07372b12de007250b9ac22f6fde10448f6ff26468eefc99ae4ca5b2f9a99b93e2493554f2b1089976be1b5d5acfaf86c5396790e5d70a576ec2b157a4cd82cefe4979c3ed17bf8e93b51ebcf1b46e9c57749ed734c1803da97c6234995a6a8183cf768390da82b92cee574a5369f4f8df049b5d91c9e44487900b733bc868248a0d9cc704ace36764aa9418d0c80428488c82211"}, {0xdd, 0xfc, "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"}]}}, @NL80211_ATTR_BEACON_HEAD={0x48c, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @from_mac=@broadcast, {0xb}}, @ver_80211n={0x0, 0x580, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffff, @default, 0x204, @void, @val={0x1, 0x5, [{0x60, 0x1}, {0x6c, 0x1}, {0x4}, {0x2, 0x1}, {0x6f, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x1f}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x9, 0x7, 0x0, 0x3e0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x100, 0x6}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x8c, "f90d0539c676555c40b56f9e2413ae1caf29ae8e2cfab8619b9ce24a09e5bafbcf921c7b1c36bcc90b56a03ee74aad7016039e90eb1f3f83d67109317c8c2136b53c0eea5ac3ed5647204479f9405414d8742386a970e2906aaed12be9a596f16b6aa46ecb621e4d280dfdec54785dfafb7439efe45270d6b35ef79aff6e7b007f7ee9165b532044064646e5"}, {0xdd, 0x96, "a551ff41eaa9143d294215f55382fe7ab4e348903d4289d72099f28e440244a03179bdd9692bed9f33425d7c92cfc6becbfc56a37346226407e6edc1d1bc5bb2c5cc5481f9797dd28427fed07a8ece5980136974d362be94c4287b5c2b5ca92e6b618629920d82f365f8e092fc276e0d73ecdb47bbf18692c07467a4e56561373fe59d3c0d16f9aa988b86220e05746347333dc0a707"}, {0xdd, 0xf9, "f05dd109e6826e7ee0c1997d520a5f1eb1b522a906164ce0c72c3997f907cc952c02cfc3427d8c45009c17b6247019dd4e9c57e5dcfdeca22ba07dd4a964636636bc507dd73c49963e011235f4f51de6fd1c3e6e7d254a18208ca92672e1a6993f0b0e127167ec40c4bf971ff63257bb00b81e757a75d3e9c026633140dd160c50053bbe4bf8ff5587df72bab8d665ec1ce15186062dfd9780ead7725ce09f3361b4d11d1bfe83c8f24e0d2475d074b4f1ef25fd637d205cc24cb2b080fb5c2f33f021328a066668ed5266d1ccb5756ab00c1ea9530124c2db53ca546bc55eeb4e4ddfc4063c4f0a8c6286293685e8afa8fc2d2f4fe6c9e9ed"}, {0xdd, 0x2c, "0bf00ee224b1cdb6f3fab37c7a2e96b2cf1c9e0391a3b45c7eae0c80da319555b4d6f481ececf668c02cb6f3"}, {0xdd, 0xf0, "850aaffca5dbb9c5cabc24f9855205d5dd2c7acc5a93be3b7bf98b1a9cccd92eaace61c6ff0219075963913719285b7d2e6bb0bf283d9d5b25b82b95611cbe1c9445b1647d0a483d8b9e929da27cd2aaf1e2e3899fdc453117b6ce8aac5de4ac0da1236e80ba22302564e1e96abf2b4e3e1cd6238df91acea5ff6428f90cbad9bcc5ccb65291594ed18b96fe0246dc64697796157bfb38d463276223725b03365bc5be259f452944a43005bb49b17e8fa95ba4d60f5d3f5121eef4329d7fb5bdf5420bf9a048cbe0af8ac4084c602fd6cd4c9b8cce9d6acee98a01ab953e6e02680cde7535e1f42b5b854c7bc7e5ee01"}, {0xdd, 0x7a, "e0c67eeece1005ad196d0603c4a3d7a83cec627ee91dd7ce9fa2ced0c6600c9d70710d809e2b2cf464df238e13ecd7d71257e0b6cc41f05cd24dd98c8035c3f0e7b65dd422eddcd11018dac1d8cf39cace70dd5f46623c040b5d8e5556169c1247917fda0b7f082bd79d3e9389cf61fcc1d83b332a0e15a371b5"}, {0xdd, 0x72, "56720589a53d0b9f0861ae77286cd160423339bd21aa38884bcb497d4885b5e04c9d6b66f65da06bc03878d7c2c2defb5a9bcf51153319ad4fd9fb4ce398bf357739dbcb76a481e88f9c2f5a42292438477fc090f3f0aec6584eec8cb388572819d6e13f5a541ae9fcad0e8dfb9a6d544c9d"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x130, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xa5, 0x2}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0x36}, {0xc, 0x1}, {0x16}, {0x6}, {0xb, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0x18, 0x4}}, @challenge={0x10, 0x1, 0x59}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x24, 0x96}}, @random_vendor={0xdd, 0xfb, "1470b5492d56559677ae2399303f3d8f7a8586b738058bbf4465039999c79f83e900ccf3f262fabe055e417761ab9907a24a26fd02e8713e9b2c0a52d51a53956dcfde3e256e2d5b6531641e63a7a9c745ccd79aa85b8598d5a64c71859a1a6e7862551ea34d8a0dbe53c5bc77e5986d6213ede68d34d1b4a3eb7593ac10d4d7fed6cbe2b23b4cb693268f948a1cb971194ce442880853d26aa657bb1d3566e7a9f51b7285f62bd124be861744c7f0aa7fc79b3c62d5db561bf1cdb36273385cdb22469971c3ea843c243aefbc8b1cc0ea7a2afd521b9b2b3309f10db76bbd3b7d68b0b4332871672822364eb65758ee0e13ee35e31aae3946f19f"}]}, @NL80211_ATTR_PROBE_RESP={0x39e, 0x91, "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"}]}, 0x1818}, 0x1, 0x0, 0x0, 0x20004001}, 0x4008000) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x7fff) read$hidraw(r1, &(0x7f0000000340)=""/4096, 0x1000) [ 1215.882774][T25474] usb 6-1: USB disconnect, device number 123 [ 1215.949855][T20627] FAULT_INJECTION: forcing a failure. [ 1215.949855][T20627] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.957969][T20632] fuse: blksize only supported for fuseblk [ 1215.967087][T20627] CPU: 1 PID: 20627 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1215.977058][T20627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.987100][T20627] Call Trace: [ 1215.990418][T20627] dump_stack+0x10f/0x19d [ 1215.994735][T20627] should_fail+0x23c/0x250 [ 1215.999125][T20627] __should_failslab+0x81/0x90 [ 1216.003918][T20627] should_failslab+0x5/0x20 [ 1216.008394][T20627] slab_pre_alloc_hook+0x20/0xd0 [ 1216.013314][T20627] kmem_cache_alloc+0x4f/0x2d0 [ 1216.018053][T20627] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.023853][T20627] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.029457][T20627] kvm_mmu_load+0xb0/0x9c0 [ 1216.033846][T20627] ? check_preemption_disabled+0x51/0x140 [ 1216.039634][T20627] ? vmx_flush_tlb_all+0x4f/0x220 [ 1216.044634][T20627] vcpu_enter_guest+0x1c74/0x2660 [ 1216.049634][T20627] ? emulation_required+0x67/0x940 [ 1216.054722][T20627] vcpu_run+0x26e/0x740 [ 1216.058921][T20627] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1216.064359][T20627] kvm_vcpu_ioctl+0x565/0x950 [ 1216.069009][T20627] ? tomoyo_file_ioctl+0x1c/0x20 [ 1216.073928][T20627] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1216.079831][T20627] __se_sys_ioctl+0xcb/0x140 [ 1216.084401][T20627] __x64_sys_ioctl+0x3f/0x50 [ 1216.088963][T20627] do_syscall_64+0x39/0x80 [ 1216.093372][T20627] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1216.099234][T20627] RIP: 0033:0x45de59 [ 1216.103179][T20627] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1216.122763][T20627] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.131146][T20627] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1216.139099][T20627] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6c}}]}}) [ 1216.147042][T20627] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.154997][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000052 [ 1216.163043][T20627] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:00 executing program 3 (fault-call:5 fault-nth:83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x74}}]}}) [ 1216.221305][T20640] fuse: blksize only supported for fuseblk 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7a}}]}}) [ 1216.278541][T20649] fuse: blksize only supported for fuseblk [ 1216.279664][T20646] FAULT_INJECTION: forcing a failure. [ 1216.279664][T20646] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.319451][T20646] CPU: 1 PID: 20646 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1216.328133][T20646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.338174][T20646] Call Trace: [ 1216.341482][T20646] dump_stack+0x10f/0x19d [ 1216.342376][T20655] fuse: blksize only supported for fuseblk [ 1216.345794][T20646] should_fail+0x23c/0x250 [ 1216.345851][T20646] __should_failslab+0x81/0x90 [ 1216.345868][T20646] should_failslab+0x5/0x20 [ 1216.365258][T20646] slab_pre_alloc_hook+0x20/0xd0 [ 1216.370180][T20646] kmem_cache_alloc+0x4f/0x2d0 [ 1216.374931][T20646] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.380720][T20646] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.386447][T20646] kvm_mmu_load+0xb0/0x9c0 [ 1216.390857][T20646] ? check_preemption_disabled+0x51/0x140 [ 1216.396558][T20646] ? vmx_flush_tlb_all+0x4f/0x220 [ 1216.401639][T20646] vcpu_enter_guest+0x1c74/0x2660 [ 1216.406666][T20646] vcpu_run+0x26e/0x740 [ 1216.410876][T20646] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1216.416392][T20646] kvm_vcpu_ioctl+0x565/0x950 [ 1216.421130][T20646] ? tomoyo_file_ioctl+0x1c/0x20 [ 1216.426058][T20646] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1216.431939][T20646] __se_sys_ioctl+0xcb/0x140 [ 1216.436573][T20646] __x64_sys_ioctl+0x3f/0x50 [ 1216.441155][T20646] do_syscall_64+0x39/0x80 [ 1216.445556][T20646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1216.451619][T20646] RIP: 0033:0x45de59 [ 1216.455502][T20646] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1216.475096][T20646] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.483487][T20646] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1216.491447][T20646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1216.499406][T20646] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.507360][T20646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000053 [ 1216.515317][T20646] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x300}}]}}) [ 1216.614159][T20660] fuse: blksize only supported for fuseblk 11:11:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x500}}]}}) 11:11:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355220540000000000109000921000000012201000905810300"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) 11:11:00 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x728, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc4) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:00 executing program 3 (fault-call:5 fault-nth:84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1216.797577][T20672] fuse: blksize only supported for fuseblk 11:11:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x400, 0x1085, 0x3ff, 0x5, 0x0, 0x7, 0x40d8, 0x6d7d, 0x0, 0x100000000000, 0x1, 0x0, 0xfffffffffffffffd, 0x3ff], 0xd000, 0x204082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:01 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) 11:11:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}]}}) [ 1216.865368][T20681] FAULT_INJECTION: forcing a failure. [ 1216.865368][T20681] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.912119][T20681] CPU: 1 PID: 20681 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1216.919861][T20693] fuse: blksize only supported for fuseblk [ 1216.920797][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.920800][T20681] Call Trace: [ 1216.920818][T20681] dump_stack+0x10f/0x19d [ 1216.920835][T20681] should_fail+0x23c/0x250 [ 1216.948627][T20681] __should_failslab+0x81/0x90 [ 1216.953399][T20681] should_failslab+0x5/0x20 [ 1216.957959][T20681] slab_pre_alloc_hook+0x20/0xd0 [ 1216.962888][T20681] kmem_cache_alloc+0x4f/0x2d0 [ 1216.967641][T20681] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.973431][T20681] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1216.975632][T20702] fuse: blksize only supported for fuseblk [ 1216.979658][T20681] kvm_mmu_load+0xb0/0x9c0 [ 1216.979669][T20681] ? check_preemption_disabled+0x51/0x140 [ 1216.979684][T20681] ? vmx_flush_tlb_all+0x4f/0x220 [ 1217.000589][T20681] vcpu_enter_guest+0x1c74/0x2660 [ 1217.005606][T20681] ? emulation_required+0x67/0x940 [ 1217.010712][T20681] vcpu_run+0x26e/0x740 [ 1217.014865][T20681] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1217.020306][T20681] kvm_vcpu_ioctl+0x565/0x950 [ 1217.025000][T20681] ? tomoyo_file_ioctl+0x1c/0x20 [ 1217.025118][T20707] fuse: blksize only supported for fuseblk [ 1217.029995][T20681] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1217.030013][T20681] __se_sys_ioctl+0xcb/0x140 [ 1217.046223][T20681] __x64_sys_ioctl+0x3f/0x50 [ 1217.050804][T20681] do_syscall_64+0x39/0x80 [ 1217.055209][T20681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 11:11:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x700}}]}}) 11:11:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x900}}]}}) 11:11:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}]}}) [ 1217.061083][T20681] RIP: 0033:0x45de59 [ 1217.065029][T20681] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1217.074179][T20710] fuse: blksize only supported for fuseblk [ 1217.084615][T20681] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.084627][T20681] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:11:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x5d, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1217.084634][T20681] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1217.084641][T20681] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.084647][T20681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 1217.084653][T20681] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:01 executing program 3 (fault-call:5 fault-nth:85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xb00}}]}}) [ 1217.235446][T20724] fuse: blksize only supported for fuseblk [ 1217.259676][T20726] FAULT_INJECTION: forcing a failure. [ 1217.259676][T20726] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.287011][T20726] CPU: 0 PID: 20726 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1217.295686][T20726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.305730][T20726] Call Trace: [ 1217.309004][T20726] dump_stack+0x10f/0x19d [ 1217.313320][T20726] should_fail+0x23c/0x250 [ 1217.317721][T20726] __should_failslab+0x81/0x90 [ 1217.322475][T20726] should_failslab+0x5/0x20 [ 1217.326963][T20726] slab_pre_alloc_hook+0x20/0xd0 [ 1217.331882][T20726] kmem_cache_alloc+0x4f/0x2d0 [ 1217.336625][T20726] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1217.342420][T20726] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1217.348037][T20726] kvm_mmu_load+0xb0/0x9c0 [ 1217.352441][T20726] ? check_preemption_disabled+0x51/0x140 [ 1217.358140][T20726] ? vmx_flush_tlb_all+0x4f/0x220 [ 1217.363142][T20726] vcpu_enter_guest+0x1c74/0x2660 [ 1217.368151][T20726] ? emulation_required+0x67/0x940 [ 1217.373264][T20726] vcpu_run+0x26e/0x740 [ 1217.377439][T20726] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1217.382886][T20726] kvm_vcpu_ioctl+0x565/0x950 [ 1217.387619][T20726] ? tomoyo_file_ioctl+0x1c/0x20 [ 1217.392568][T20726] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1217.398464][T20726] __se_sys_ioctl+0xcb/0x140 [ 1217.403041][T20726] __x64_sys_ioctl+0x3f/0x50 [ 1217.407620][T20726] do_syscall_64+0x39/0x80 [ 1217.412019][T20726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1217.417887][T20726] RIP: 0033:0x45de59 [ 1217.421766][T20726] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1217.441385][T20726] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.449781][T20726] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1217.457737][T20726] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1217.465687][T20726] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.473689][T20726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000055 [ 1217.481637][T20726] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1217.497193][ T8585] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1217.960079][ T8585] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1217.974617][ T8585] usb 6-1: can't read configurations, error -61 [ 1218.160074][ T8585] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1218.600018][ T8585] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1218.607858][ T8585] usb 6-1: can't read configurations, error -61 [ 1218.614893][ T8585] usb usb6-port1: attempt power cycle [ 1219.359948][ T8585] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1219.630260][ T8585] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1219.637932][ T8585] usb 6-1: can't read configurations, error -61 11:11:03 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7fff) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) read$hidraw(r1, &(0x7f0000000340)=""/4096, 0x1000) 11:11:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}]}}) 11:11:03 executing program 3 (fault-call:5 fault-nth:86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:03 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) 11:11:03 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={@fixed={[], 0x10}, 0x9fc}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1219.809902][ T8585] usb 6-1: new high-speed USB device number 127 using dummy_hcd 11:11:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x24, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r1, 0x0, r3, 0x0, 0x80000000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e300000000099c"], 0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x89080111}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x201, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x101002, 0x0) [ 1219.888774][T20756] FAULT_INJECTION: forcing a failure. [ 1219.888774][T20756] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.903149][T20757] fuse: blksize only supported for fuseblk [ 1219.929927][T20756] CPU: 1 PID: 20756 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1219.938597][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.948631][T20756] Call Trace: [ 1219.951924][T20756] dump_stack+0x10f/0x19d [ 1219.956244][T20756] should_fail+0x23c/0x250 [ 1219.960657][T20756] __should_failslab+0x81/0x90 [ 1219.965435][T20756] should_failslab+0x5/0x20 [ 1219.969923][T20756] slab_pre_alloc_hook+0x20/0xd0 [ 1219.974850][T20756] kmem_cache_alloc+0x4f/0x2d0 [ 1219.979638][T20756] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1219.985429][T20756] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1219.991051][T20756] kvm_mmu_load+0xb0/0x9c0 [ 1219.995460][T20756] ? check_preemption_disabled+0x51/0x140 [ 1220.001202][T20756] ? vmx_flush_tlb_all+0x4f/0x220 [ 1220.006217][T20756] vcpu_enter_guest+0x1c74/0x2660 [ 1220.011259][T20756] ? emulation_required+0x67/0x940 [ 1220.016363][T20756] vcpu_run+0x26e/0x740 [ 1220.020513][T20756] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1220.025956][T20756] kvm_vcpu_ioctl+0x565/0x950 [ 1220.030623][T20756] ? tomoyo_file_ioctl+0x1c/0x20 [ 1220.035634][T20756] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1220.041551][T20756] __se_sys_ioctl+0xcb/0x140 [ 1220.046235][T20756] __x64_sys_ioctl+0x3f/0x50 [ 1220.050872][T20756] do_syscall_64+0x39/0x80 [ 1220.055275][T20756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1220.061148][T20756] RIP: 0033:0x45de59 [ 1220.065030][T20756] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1220.084746][T20756] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.093141][T20756] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1220.101095][T20756] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1220.109048][T20756] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.117070][T20756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000056 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xd00}}]}}) [ 1220.125109][T20756] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1220.140994][ T8585] usb 6-1: device descriptor read/8, error -71 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}]}}) [ 1220.202155][T20777] fuse: blksize only supported for fuseblk [ 1220.308290][T20784] fuse: blksize only supported for fuseblk [ 1220.324432][T20784] fuse: blksize only supported for fuseblk 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1020}}]}}) [ 1220.359893][ T8585] usb 6-1: device descriptor read/8, error -71 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1100}}]}}) [ 1220.419766][T20788] fuse: blksize only supported for fuseblk 11:11:04 executing program 3 (fault-call:5 fault-nth:87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1220.501518][ T8585] usb usb6-port1: unable to enumerate USB device 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}]}}) [ 1220.547603][T20795] fuse: blksize only supported for fuseblk [ 1220.576651][T20797] FAULT_INJECTION: forcing a failure. [ 1220.576651][T20797] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.604098][T20797] CPU: 0 PID: 20797 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1220.612872][T20797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.622913][T20797] Call Trace: [ 1220.626242][T20797] dump_stack+0x10f/0x19d [ 1220.630562][T20797] should_fail+0x23c/0x250 [ 1220.635002][T20797] __should_failslab+0x81/0x90 [ 1220.639758][T20797] should_failslab+0x5/0x20 [ 1220.644295][T20797] slab_pre_alloc_hook+0x20/0xd0 [ 1220.649223][T20797] kmem_cache_alloc+0x4f/0x2d0 [ 1220.653968][T20797] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1220.659758][T20797] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1220.665420][T20797] kvm_mmu_load+0xb0/0x9c0 [ 1220.669921][T20797] ? check_preemption_disabled+0x51/0x140 [ 1220.675630][T20797] ? vmx_flush_tlb_all+0x4f/0x220 [ 1220.680635][T20797] vcpu_enter_guest+0x1c74/0x2660 [ 1220.685644][T20797] ? emulation_required+0x67/0x940 [ 1220.690785][T20797] vcpu_run+0x26e/0x740 [ 1220.695014][T20797] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1220.700469][T20797] kvm_vcpu_ioctl+0x565/0x950 [ 1220.705132][T20797] ? tomoyo_file_ioctl+0x1c/0x20 [ 1220.710053][T20797] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1220.715927][T20797] __se_sys_ioctl+0xcb/0x140 [ 1220.720522][T20797] __x64_sys_ioctl+0x3f/0x50 [ 1220.725099][T20797] do_syscall_64+0x39/0x80 [ 1220.729489][T20797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1220.735356][T20797] RIP: 0033:0x45de59 [ 1220.739229][T20797] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1220.758913][T20797] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.767297][T20797] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1220.775242][T20797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1220.783186][T20797] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.791130][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000057 11:11:04 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfe, {0x6, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0xaa, 0x6, 0x8, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2000}}]}}) 11:11:04 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) r4 = signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000001340)={{@host, 0x6}, {@local}, 0x400, "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"}, 0x418, 0x2}) [ 1220.799085][T20797] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:05 executing program 3 (fault-call:5 fault-nth:88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/106, 0x6a}], 0x1}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000000c0)={0x1, 0x5c8e, 0xff}) sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="1efbd3195dfe60", 0x7}], 0x1, &(0x7f00000003c0)="9dbb7f3c7bc84721c5a761d856cb769a65776952927f79b39781478a43440645035de0bfbaa370fea1f794c19a268f7a31253aed24e37d68c99c12bb10b52d16d5ecd1ddb5af1d1763257938258be4e25ce00952a2c87adf7f2e56d810e24755352580fc82fb5a13d5a533f63e1847d765", 0x71, 0x4845}, 0x4000000) r4 = openat2(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x80, 0x0, 0x3}, 0x18) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f00000005c0)=0x2) [ 1220.902203][T20818] fuse: blksize only supported for fuseblk [ 1220.960351][T20824] FAULT_INJECTION: forcing a failure. [ 1220.960351][T20824] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.982207][T20824] CPU: 0 PID: 20824 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1220.990904][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.000943][T20824] Call Trace: [ 1221.004224][T20824] dump_stack+0x10f/0x19d [ 1221.008595][T20824] should_fail+0x23c/0x250 [ 1221.013016][T20824] __should_failslab+0x81/0x90 [ 1221.017764][T20824] should_failslab+0x5/0x20 [ 1221.022256][T20824] slab_pre_alloc_hook+0x20/0xd0 [ 1221.027195][T20824] kmem_cache_alloc+0x4f/0x2d0 [ 1221.032018][T20824] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1221.037807][T20824] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1221.043456][T20824] kvm_mmu_load+0xb0/0x9c0 [ 1221.047863][T20824] ? check_preemption_disabled+0x51/0x140 [ 1221.053573][T20824] ? vmx_flush_tlb_all+0x4f/0x220 [ 1221.058585][T20824] vcpu_enter_guest+0x1c74/0x2660 [ 1221.063624][T20824] ? emulation_required+0x67/0x940 [ 1221.068727][T20824] vcpu_run+0x26e/0x740 [ 1221.072877][T20824] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1221.078332][T20824] kvm_vcpu_ioctl+0x565/0x950 [ 1221.083074][T20824] ? tomoyo_file_ioctl+0x1c/0x20 [ 1221.088006][T20824] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1221.093936][T20824] __se_sys_ioctl+0xcb/0x140 [ 1221.098517][T20824] __x64_sys_ioctl+0x3f/0x50 [ 1221.103095][T20824] do_syscall_64+0x39/0x80 [ 1221.107499][T20824] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1221.113378][T20824] RIP: 0033:0x45de59 [ 1221.117264][T20824] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1221.136854][T20824] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.145252][T20824] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1221.153211][T20824] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1221.161169][T20824] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.169127][T20824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000058 [ 1221.177090][T20824] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1221.259798][ T8585] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1221.559738][ T8585] usb 6-1: device descriptor read/64, error 18 [ 1221.969723][ T8585] usb 6-1: device descriptor read/64, error 18 [ 1222.259717][ T8585] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1222.549684][ T8585] usb 6-1: device descriptor read/64, error 18 11:11:07 executing program 3 (fault-call:5 fault-nth:89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2010}}]}}) 11:11:07 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) signalfd(r2, &(0x7f0000000040)={[0xc7f4]}, 0x8) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:07 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x3, 0x1, [{0x7fff, 0x0, 0x57d}, {0x6, 0x0, 0x1f}, {0x8a19, 0x0, 0x2}]}) r2 = dup2(r1, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xe8e, @mcast2, 0x2}, r3}}, 0x30) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:07 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x40) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x8, 0x10, r4, 0x83000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x201, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0xc0000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="86000000ef3fa56394c74111ffb65f1c127ea7b03a0a242ce0150a4b0810f6927e006d546451224210ab14968cd2789967a391559ad8d6e7bc367c129b68221fed635bc186c9faaa33505be78fb95b2ef52b7c6d464c197d17fcfffffff082084a36e59ffe74a7f6ffc84fdd7509bd0a6ab708982cdf72832c9919d436b2a0cf00e43b021a38e2b65900"]) 11:11:07 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [{0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x2, r3}, {}, {}, {}], {0x10, 0x5}}, 0x4c, 0x0) setregid(0x0, r3) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='9p\x00', 0x200000, &(0x7f0000000100)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@mmap='mmap'}], [{@smackfsroot={'smackfsroot', 0x3d, '*^[)'}}, {@euid_eq={'euid'}}, {@obj_role={'obj_role', 0x3d, '&^@'}}, {@dont_hash='dont_hash'}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) [ 1222.951419][ T8585] usb 6-1: device descriptor read/64, error 18 [ 1222.967928][T20868] fuse: blksize only supported for fuseblk 11:11:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/30, 0x1e}], 0x9, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$netrom(r1, &(0x7f00000006c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) [ 1222.992919][T20873] FAULT_INJECTION: forcing a failure. [ 1222.992919][T20873] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.043293][T20873] CPU: 0 PID: 20873 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1223.052062][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.062095][T20873] Call Trace: [ 1223.065372][T20873] dump_stack+0x10f/0x19d [ 1223.069692][T20873] should_fail+0x23c/0x250 [ 1223.074098][T20873] __should_failslab+0x81/0x90 [ 1223.078845][T20873] should_failslab+0x5/0x20 [ 1223.083338][T20873] slab_pre_alloc_hook+0x20/0xd0 [ 1223.088257][T20873] kmem_cache_alloc+0x4f/0x2d0 [ 1223.093017][T20873] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.098825][T20873] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.104446][T20873] kvm_mmu_load+0xb0/0x9c0 [ 1223.108852][T20873] ? check_preemption_disabled+0x51/0x140 [ 1223.114631][T20873] ? vmx_flush_tlb_all+0x4f/0x220 [ 1223.119664][T20873] vcpu_enter_guest+0x1c74/0x2660 [ 1223.124678][T20873] ? emulation_required+0x67/0x940 [ 1223.129778][T20873] vcpu_run+0x26e/0x740 [ 1223.134000][T20873] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1223.139443][T20873] kvm_vcpu_ioctl+0x565/0x950 [ 1223.144109][T20873] ? tomoyo_file_ioctl+0x1c/0x20 [ 1223.149034][T20873] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1223.155080][T20873] __se_sys_ioctl+0xcb/0x140 [ 1223.159679][T20873] __x64_sys_ioctl+0x3f/0x50 [ 1223.164251][T20873] do_syscall_64+0x39/0x80 [ 1223.168725][T20873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1223.174618][T20873] RIP: 0033:0x45de59 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2500}}]}}) [ 1223.178502][T20873] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1223.198091][T20873] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.206531][T20873] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1223.214500][T20873] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1223.222452][T20873] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.230411][T20873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000059 [ 1223.230910][T20903] fuse: blksize only supported for fuseblk [ 1223.238366][T20873] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1223.242259][ T8585] usb usb6-port1: attempt power cycle 11:11:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x30000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x611, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x53, 0x9, 0xfac01}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0xc}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x425c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x27}], @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44800}, 0x41840) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0x1, 0x2, 0x0, 0x7ff, 0xffffffc1, 0xffffffff, 0xfffffe01}, {0x40000000, 0xffff, 0xd, 0x0, 0x1ff, 0x20, 0x906f}, {0x0, 0xffffffc1, 0x6, 0x7, 0xb58, 0x401, 0x6f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x1fc, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x9, @broadcast, 0x7, "", 0x1, 0x1, @broadcast, 0xffff}}, @tim={0x5, 0x8b, {0x6d, 0x7, 0x0, "779145068b161816d9410a1c6a2268ce96ab80a7eb28ac2aa2a968f26f4afed8537fefae14cbd5202c8c7cedd69fff205fd33bce5a7cf3fe225cadefca4c36e9a4af49da3b2827c042192c75d549bf080148aeb2f519add5b2b2c64324ec1a94c2117f38af33b56626db1ac69e3b88dd25ea8c5ee44117acfd823216b43fdb632adcf4aabdb6487d"}}, @measure_req={0x26, 0x11, {0x66, 0x6, 0xf8, "38b38d2f65446b2d4c94ba2af672"}}]}, @NL80211_ATTR_IE={0x111, 0x2a, [@supported_rates={0x1, 0x4, [{0x3}, {0x1b, 0x1}, {0x5, 0x1}, {0x16, 0x1}]}, @tim={0x5, 0xe8, {0xf8, 0xf, 0x40, "b7805ee11251a3d1547d683c2e2e89e17cebcb10016bd369c1a780b77ecf7de54a6791e5f36c9ed505e0be901b6cfa2c404782ad4ac17a8a643b1eb3bf5d06e3d6b2af04dad9c5f80d3774a906a11a5f0ad2b0d99f552ed3113a9f9c11a6c0630cd804b339e7a7f2ce240c4337812054a5775c115c581eaace258f7b68cc225190786f5d2f7d83e8ed062548bd164b7233d6a904b8a94d3bae7036429789d51f03a0a71ce4b348f4387652972574f18c918b0ead3eea70f209d1d340e4e805476a85944f661396bebf3144f1eda9c9e81e0409544eea77e834a2e63a4f21e5a09c4b94d28c"}}, @cf={0x4, 0x6, {0x81, 0x7f, 0x0, 0xb}}, @mic={0x8c, 0x10, {0xbf0, "fbaf1340d6d0", @short="aeab010c74f417b8"}}, @supported_rates={0x1, 0x1, [{0x60}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4048010}, 0x2000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11:11:07 executing program 3 (fault-call:5 fault-nth:90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4000}}]}}) [ 1223.343642][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1223.353922][T20912] fuse: blksize only supported for fuseblk [ 1223.362250][T20914] FAULT_INJECTION: forcing a failure. [ 1223.362250][T20914] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.386792][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1223.395995][T20914] CPU: 0 PID: 20914 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1223.404706][T20914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.414739][T20914] Call Trace: [ 1223.418021][T20914] dump_stack+0x10f/0x19d [ 1223.422336][T20914] should_fail+0x23c/0x250 [ 1223.426745][T20914] __should_failslab+0x81/0x90 [ 1223.431490][T20914] should_failslab+0x5/0x20 [ 1223.435978][T20914] slab_pre_alloc_hook+0x20/0xd0 [ 1223.440898][T20914] kmem_cache_alloc+0x4f/0x2d0 [ 1223.445649][T20914] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.451440][T20914] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.457066][T20914] kvm_mmu_load+0xb0/0x9c0 [ 1223.461467][T20914] ? check_preemption_disabled+0x51/0x140 [ 1223.464814][T20927] fuse: blksize only supported for fuseblk [ 1223.467221][T20914] ? vmx_flush_tlb_all+0x4f/0x220 [ 1223.467239][T20914] vcpu_enter_guest+0x1c74/0x2660 [ 1223.483028][T20914] vcpu_run+0x26e/0x740 [ 1223.487177][T20914] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4800}}]}}) 11:11:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x0, 0x4}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4c00}}]}}) [ 1223.492620][T20914] kvm_vcpu_ioctl+0x565/0x950 [ 1223.497344][T20914] ? tomoyo_file_ioctl+0x1c/0x20 [ 1223.502270][T20914] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1223.508156][T20914] __se_sys_ioctl+0xcb/0x140 [ 1223.512824][T20914] __x64_sys_ioctl+0x3f/0x50 [ 1223.517423][T20914] do_syscall_64+0x39/0x80 [ 1223.521828][T20914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1223.527722][T20914] RIP: 0033:0x45de59 [ 1223.531602][T20914] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1223.546913][T20934] fuse: blksize only supported for fuseblk [ 1223.551189][T20914] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.551202][T20914] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1223.551208][T20914] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1223.551215][T20914] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.551222][T20914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005a [ 1223.551228][T20914] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:07 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x43c700, 0x0) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5c00}}]}}) 11:11:07 executing program 3 (fault-call:5 fault-nth:91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1223.806040][T20948] fuse: blksize only supported for fuseblk [ 1223.819423][T20950] FAULT_INJECTION: forcing a failure. [ 1223.819423][T20950] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.838512][T20950] CPU: 1 PID: 20950 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1223.847222][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.857381][T20950] Call Trace: [ 1223.860661][T20950] dump_stack+0x10f/0x19d [ 1223.864975][T20950] should_fail+0x23c/0x250 [ 1223.869452][T20950] __should_failslab+0x81/0x90 [ 1223.874200][T20950] should_failslab+0x5/0x20 [ 1223.878681][T20950] slab_pre_alloc_hook+0x20/0xd0 [ 1223.883666][T20950] kmem_cache_alloc+0x4f/0x2d0 [ 1223.888472][T20950] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.894264][T20950] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1223.899887][T20950] kvm_mmu_load+0xb0/0x9c0 [ 1223.904292][T20950] ? check_preemption_disabled+0x51/0x140 [ 1223.909993][T20950] ? vmx_flush_tlb_all+0x4f/0x220 [ 1223.915096][T20950] vcpu_enter_guest+0x1c74/0x2660 [ 1223.920106][T20950] ? emulation_required+0x67/0x940 [ 1223.925223][T20950] vcpu_run+0x26e/0x740 [ 1223.929368][T20950] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1223.934851][T20950] kvm_vcpu_ioctl+0x565/0x950 [ 1223.939559][T20950] ? tomoyo_file_ioctl+0x1c/0x20 [ 1223.944485][T20950] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1223.950391][T20950] __se_sys_ioctl+0xcb/0x140 [ 1223.955021][T20950] __x64_sys_ioctl+0x3f/0x50 [ 1223.959693][T20950] do_syscall_64+0x39/0x80 [ 1223.964099][T20950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1223.969997][T20950] RIP: 0033:0x45de59 [ 1223.973961][T20950] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1223.993552][T20950] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.001951][T20950] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1224.009908][T20950] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1224.017866][T20950] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.025862][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005b [ 1224.033828][T20950] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1224.119533][ T8585] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1224.349569][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1224.360463][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.371316][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.381063][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1224.394080][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1224.403120][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.411994][ T8585] usb 6-1: config 0 descriptor?? [ 1224.880282][ T8585] uclogic 0003:5543:0522.003A: item fetching failed at offset 0/1 [ 1224.888119][ T8585] uclogic 0003:5543:0522.003A: parse failed [ 1224.902922][ T8585] uclogic: probe of 0003:5543:0522.003A failed with error -22 [ 1225.081936][T14845] usb 6-1: USB disconnect, device number 4 [ 1225.859434][T14845] usb 6-1: new high-speed USB device number 5 using dummy_hcd 11:11:10 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0xf000}) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd29, 0x80000001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x8000) ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:10 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3]) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x8, 0x1, 0x1f, 0x1, 0x17, 0x5}) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x40, 0x210000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000180)={0x80000000}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, r3, 0xee01}, 0xc) 11:11:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6000}}]}}) 11:11:10 executing program 3 (fault-call:5 fault-nth:92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x7, @mcast2}, @in6={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0xa}, 0x1}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0xd6}, @in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x10000}, @in6={0xa, 0x4e23, 0x20, @empty, 0x2}]}, &(0x7f0000000340)=0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040435522ee3f0000000001090243f54e7800000009040000fd03010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x45401) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @reserved="426cdceb886aaf700ca74d704422c5ea24359e9838ed1836d558640335a7bc46"}}) [ 1226.260612][T14845] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1226.261886][T20991] FAULT_INJECTION: forcing a failure. [ 1226.261886][T20991] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.268168][T14845] usb 6-1: can't read configurations, error -71 [ 1226.289717][T20998] fuse: blksize only supported for fuseblk 11:11:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6800}}]}}) 11:11:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1226.327288][T20991] CPU: 0 PID: 20991 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1226.335964][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.346068][T20991] Call Trace: [ 1226.349411][T20991] dump_stack+0x10f/0x19d [ 1226.353753][T20991] should_fail+0x23c/0x250 [ 1226.358187][T20991] __should_failslab+0x81/0x90 [ 1226.362942][T20991] should_failslab+0x5/0x20 [ 1226.367447][T20991] slab_pre_alloc_hook+0x20/0xd0 [ 1226.372457][T20991] kmem_cache_alloc+0x4f/0x2d0 [ 1226.377213][T20991] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1226.383006][T20991] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1226.388661][T20991] kvm_mmu_load+0xb0/0x9c0 [ 1226.393070][T20991] ? check_preemption_disabled+0x51/0x140 [ 1226.398778][T20991] ? vmx_flush_tlb_all+0x4f/0x220 [ 1226.403797][T20991] vcpu_enter_guest+0x1c74/0x2660 [ 1226.408810][T20991] ? emulation_required+0x67/0x940 [ 1226.413972][T20991] vcpu_run+0x26e/0x740 [ 1226.418119][T20991] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1226.423570][T20991] kvm_vcpu_ioctl+0x565/0x950 [ 1226.428236][T20991] ? tomoyo_file_ioctl+0x1c/0x20 [ 1226.433680][T20991] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1226.439601][T20991] __se_sys_ioctl+0xcb/0x140 [ 1226.444182][T20991] __x64_sys_ioctl+0x3f/0x50 [ 1226.448761][T20991] do_syscall_64+0x39/0x80 [ 1226.453170][T20991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1226.459053][T20991] RIP: 0033:0x45de59 [ 1226.463115][T20991] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.475728][T21024] tmpfs: Bad value for 'mode' [ 1226.482715][T20991] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.482727][T20991] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1226.482734][T20991] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1226.482741][T20991] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1226.482747][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c [ 1226.482754][T20991] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1226.495973][T21028] fuse: blksize only supported for fuseblk 11:11:10 executing program 3 (fault-call:5 fault-nth:93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x80001, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000180)={0x9, [0x10001, 0x2c, 0x1], [{0x1, 0xa4e, 0x0, 0x0, 0x1}, {0x7, 0x1ff}, {0x5, 0x400, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xa0c1, 0x0, 0x0, 0x1}, {0x58, 0x80000001, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x0, 0x1, 0x1}, {0xffff, 0xff}, {0xffffffff, 0x81}, {0x5, 0x0, 0x1, 0x0, 0x0, 0x1}], 0xa01}) 11:11:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6c00}}]}}) [ 1226.620725][T21038] FAULT_INJECTION: forcing a failure. [ 1226.620725][T21038] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.635074][T21038] CPU: 0 PID: 21038 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1226.643745][T21038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.654475][T21038] Call Trace: [ 1226.657779][T21038] dump_stack+0x10f/0x19d [ 1226.662091][T21038] should_fail+0x23c/0x250 [ 1226.666500][T21038] __should_failslab+0x81/0x90 [ 1226.671257][T21038] should_failslab+0x5/0x20 [ 1226.675749][T21038] slab_pre_alloc_hook+0x20/0xd0 [ 1226.680671][T21038] kmem_cache_alloc+0x4f/0x2d0 [ 1226.685424][T21038] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1226.691252][T21038] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1226.696867][T21038] kvm_mmu_load+0xb0/0x9c0 [ 1226.701272][T21038] ? check_preemption_disabled+0x51/0x140 [ 1226.707042][T21038] ? vmx_flush_tlb_all+0x4f/0x220 [ 1226.712054][T21038] vcpu_enter_guest+0x1c74/0x2660 [ 1226.717147][T21038] ? emulation_required+0x67/0x940 [ 1226.722241][T21038] vcpu_run+0x26e/0x740 [ 1226.726392][T21038] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1226.731858][T21038] kvm_vcpu_ioctl+0x565/0x950 [ 1226.736573][T21038] ? tomoyo_file_ioctl+0x1c/0x20 [ 1226.741548][T21038] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1226.747437][T21038] __se_sys_ioctl+0xcb/0x140 [ 1226.752021][T21038] __x64_sys_ioctl+0x3f/0x50 [ 1226.756606][T21038] do_syscall_64+0x39/0x80 [ 1226.761011][T21038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1226.766889][T21038] RIP: 0033:0x45de59 [ 1226.770775][T21038] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.790366][T21038] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.798763][T21038] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1226.806721][T21038] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 11:11:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e0660f070f09f36c0f01", 0x27}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x2ef, 0xfffffe00, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1226.814676][T21038] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1226.822636][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005d [ 1226.830598][T21038] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1226.842940][T21045] fuse: blksize only supported for fuseblk [ 1226.919385][T14845] usb 6-1: new high-speed USB device number 6 using dummy_hcd 11:11:11 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {r3, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:11 executing program 3 (fault-call:5 fault-nth:94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7400}}]}}) 11:11:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) fsetxattr(r3, &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='\x00', 0x1, 0x2) 11:11:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x95d, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000200)=0xe8) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x27400, &(0x7f0000001340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9cc}}], [{@subj_role={'subj_role'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}}) [ 1227.163899][T21078] FAULT_INJECTION: forcing a failure. [ 1227.163899][T21078] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.185806][T21081] fuse: blksize only supported for fuseblk [ 1227.205286][T21078] CPU: 1 PID: 21078 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1227.214061][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.224105][T21078] Call Trace: [ 1227.227388][T21078] dump_stack+0x10f/0x19d [ 1227.231821][T21078] should_fail+0x23c/0x250 [ 1227.236231][T21078] __should_failslab+0x81/0x90 [ 1227.240983][T21078] should_failslab+0x5/0x20 [ 1227.245492][T21078] slab_pre_alloc_hook+0x20/0xd0 [ 1227.250420][T21078] kmem_cache_alloc+0x4f/0x2d0 [ 1227.255217][T21078] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1227.261012][T21078] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1227.266623][T21078] kvm_mmu_load+0xb0/0x9c0 [ 1227.271025][T21078] ? check_preemption_disabled+0x51/0x140 [ 1227.276732][T21078] ? vmx_flush_tlb_all+0x4f/0x220 [ 1227.281924][T21078] vcpu_enter_guest+0x1c74/0x2660 [ 1227.286939][T21078] ? emulation_required+0x67/0x940 [ 1227.292035][T21078] vcpu_run+0x26e/0x740 [ 1227.296184][T21078] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1227.301655][T21078] kvm_vcpu_ioctl+0x565/0x950 [ 1227.306326][T21078] ? tomoyo_file_ioctl+0x1c/0x20 [ 1227.311253][T21078] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1227.317130][T21078] __se_sys_ioctl+0xcb/0x140 [ 1227.321708][T21078] __x64_sys_ioctl+0x3f/0x50 [ 1227.326283][T21078] do_syscall_64+0x39/0x80 [ 1227.330688][T21078] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1227.336584][T21078] RIP: 0033:0x45de59 [ 1227.340469][T21078] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1227.360096][T21078] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1227.368496][T21078] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1227.376453][T21078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1227.384407][T21078] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.392360][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005e [ 1227.400333][T21078] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1227.509641][T14845] usb 6-1: config index 0 descriptor too short (expected 62787, got 36) [ 1227.526494][T14845] usb 6-1: config 120 has too many interfaces: 78, using maximum allowed: 32 [ 1227.544099][T14845] usb 6-1: config 120 has 1 interface, different from the descriptor's value: 78 [ 1227.563241][T14845] usb 6-1: too many endpoints for config 120 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1227.585089][T14845] usb 6-1: config 120 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.614785][T14845] usb 6-1: config 120 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.633930][T14845] usb 6-1: config 120 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1227.647705][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=ee22, bcdDevice= 0.3f [ 1227.657455][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.150050][T14845] hid-generic 0003:5543:EE22.003B: item fetching failed at offset 0/1 [ 1228.158349][T14845] hid-generic: probe of 0003:5543:EE22.003B failed with error -22 [ 1228.352637][ T8585] usb 6-1: USB disconnect, device number 6 11:11:13 executing program 3 (fault-call:5 fault-nth:95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7a00}}]}}) 11:11:13 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1, 0x40}], 0x1, 0x3ff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x1f, 0x3, 0x4}) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000080)) 11:11:13 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:13 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x280100, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000080)="66baa000ed660f38827000643b2c22f347dbf340d10f26440f2201c462f935138f8978c1c8c402c50086fefffffff0432039", 0x32}], 0x0, 0x40, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x0, 0x4000, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000280)={0x73, @multicast2, 0x4e24, 0x0, 'lblc\x00', 0x8, 0x7fffffff, 0x2d}, 0x2c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x2, 0x0, 0x0, 0x100000000000000, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000404355220540000000000109022400010000000009040000fd03010000092100000001220100090581030000000000c0878eeb7591a99419e7f430c37269d22cea6968d0a7b5374688558ef91a61c68f3f1a55f90bb43603dd49085d0dbe45db97909272ab59ef5c58edeb8a0149485b2aa09666f9bdf332d4acd5901fe36d19bfc3e1dec51b4cae9c26052e664902079ab7aafdd05d17e3edfa8177082e72f4"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', r2, 0x7800, 0x10, 0x8, 0x9, {{0x11, 0x4, 0x3, 0x25, 0x44, 0x64, 0x0, 0xad, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffc0}]}, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x5, [{@remote, 0x8f}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@local}]}]}}}}}) [ 1228.928270][T21135] FAULT_INJECTION: forcing a failure. [ 1228.928270][T21135] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.945370][T21136] fuse: blksize only supported for fuseblk [ 1228.973160][T21135] CPU: 0 PID: 21135 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1228.981828][T21135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.991868][T21135] Call Trace: [ 1228.995144][T21135] dump_stack+0x10f/0x19d [ 1228.999484][T21135] should_fail+0x23c/0x250 [ 1229.003894][T21135] __should_failslab+0x81/0x90 [ 1229.008715][T21135] should_failslab+0x5/0x20 [ 1229.013203][T21135] slab_pre_alloc_hook+0x20/0xd0 [ 1229.018126][T21135] kmem_cache_alloc+0x4f/0x2d0 [ 1229.022874][T21135] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.028664][T21135] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.034298][T21135] kvm_mmu_load+0xb0/0x9c0 [ 1229.038741][T21135] ? check_preemption_disabled+0x51/0x140 [ 1229.044441][T21135] ? vmx_flush_tlb_all+0x4f/0x220 [ 1229.049453][T21135] vcpu_enter_guest+0x1c74/0x2660 [ 1229.054471][T21135] vcpu_run+0x26e/0x740 [ 1229.058695][T21135] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1229.064141][T21135] kvm_vcpu_ioctl+0x565/0x950 [ 1229.068806][T21135] ? tomoyo_file_ioctl+0x1c/0x20 11:11:13 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000200)={0x4, 0x7613ef7e, 0x401, 0x5, 0x7, 0xc4, 0x6, 0x1f, 0x4, 0x80, 0xc8, "3e80f9e61ffb57b33f99a25ae493bc5ecaa23a696efa1c7d85a8bf7f1e2975e9"}) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000780)="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", 0x1000, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1229.073808][T21135] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1229.079694][T21135] __se_sys_ioctl+0xcb/0x140 [ 1229.084272][T21135] __x64_sys_ioctl+0x3f/0x50 [ 1229.088913][T21135] do_syscall_64+0x39/0x80 [ 1229.093327][T21135] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1229.099222][T21135] RIP: 0033:0x45de59 [ 1229.103113][T21135] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xedc0}}]}}) [ 1229.122735][T21135] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.131129][T21135] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1229.139089][T21135] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1229.147048][T21135] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.155011][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005f [ 1229.162972][T21135] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xff00}}]}}) [ 1229.215712][T21169] fuse: blksize only supported for fuseblk 11:11:13 executing program 3 (fault-call:5 fault-nth:96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1229.321980][T21175] fuse: blksize only supported for fuseblk [ 1229.347718][T21175] fuse: blksize only supported for fuseblk [ 1229.358850][T21178] FAULT_INJECTION: forcing a failure. [ 1229.358850][T21178] name failslab, interval 1, probability 0, space 0, times 0 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400000}}]}}) [ 1229.391883][T21178] CPU: 1 PID: 21178 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1229.400538][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.410658][T21178] Call Trace: [ 1229.413950][T21178] dump_stack+0x10f/0x19d [ 1229.418356][T21178] should_fail+0x23c/0x250 [ 1229.422759][T21178] __should_failslab+0x81/0x90 [ 1229.427571][T21178] should_failslab+0x5/0x20 [ 1229.432058][T21178] slab_pre_alloc_hook+0x20/0xd0 [ 1229.437029][T21178] kmem_cache_alloc+0x4f/0x2d0 [ 1229.441817][T21178] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.443916][T21184] fuse: blksize only supported for fuseblk [ 1229.447615][T21178] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.447631][T21178] kvm_mmu_load+0xb0/0x9c0 [ 1229.463515][T21178] ? check_preemption_disabled+0x51/0x140 [ 1229.469225][T21178] ? vmx_flush_tlb_all+0x4f/0x220 [ 1229.474233][T21178] vcpu_enter_guest+0x1c74/0x2660 [ 1229.479253][T21178] ? emulation_required+0x67/0x940 [ 1229.484359][T21178] vcpu_run+0x26e/0x740 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000000}}]}}) [ 1229.488573][T21178] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1229.494018][T21178] kvm_vcpu_ioctl+0x565/0x950 [ 1229.498701][T21178] ? tomoyo_file_ioctl+0x1c/0x20 [ 1229.503672][T21178] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1229.509553][T21178] __se_sys_ioctl+0xcb/0x140 [ 1229.514182][T21178] __x64_sys_ioctl+0x3f/0x50 [ 1229.518831][T21178] do_syscall_64+0x39/0x80 [ 1229.523236][T21178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1229.529104][T21178] RIP: 0033:0x45de59 [ 1229.532995][T21178] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1229.552579][T21178] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.561019][T21178] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1229.568963][T21178] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1229.576908][T21178] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.584850][T21178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000060 11:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2000000}}]}}) [ 1229.592795][T21178] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1229.629680][T21189] fuse: blksize only supported for fuseblk 11:11:13 executing program 3 (fault-call:5 fault-nth:97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1229.689162][T25474] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1229.713634][T21193] fuse: blksize only supported for fuseblk [ 1229.764423][T21197] FAULT_INJECTION: forcing a failure. [ 1229.764423][T21197] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.789981][T21197] CPU: 0 PID: 21197 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1229.798655][T21197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.808692][T21197] Call Trace: [ 1229.811975][T21197] dump_stack+0x10f/0x19d [ 1229.816396][T21197] should_fail+0x23c/0x250 [ 1229.820802][T21197] __should_failslab+0x81/0x90 [ 1229.825567][T21197] should_failslab+0x5/0x20 [ 1229.830089][T21197] slab_pre_alloc_hook+0x20/0xd0 [ 1229.835014][T21197] kmem_cache_alloc+0x4f/0x2d0 [ 1229.839857][T21197] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.845649][T21197] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1229.851270][T21197] kvm_mmu_load+0xb0/0x9c0 [ 1229.855680][T21197] ? check_preemption_disabled+0x51/0x140 [ 1229.861387][T21197] ? vmx_flush_tlb_all+0x4f/0x220 [ 1229.866400][T21197] vcpu_enter_guest+0x1c74/0x2660 [ 1229.871472][T21197] ? emulation_required+0x67/0x940 [ 1229.876580][T21197] vcpu_run+0x26e/0x740 [ 1229.880732][T21197] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1229.886214][T21197] kvm_vcpu_ioctl+0x565/0x950 [ 1229.890881][T21197] ? tomoyo_file_ioctl+0x1c/0x20 [ 1229.895804][T21197] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1229.901677][T21197] __se_sys_ioctl+0xcb/0x140 [ 1229.906254][T21197] __x64_sys_ioctl+0x3f/0x50 [ 1229.910837][T21197] do_syscall_64+0x39/0x80 [ 1229.915271][T21197] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1229.921154][T21197] RIP: 0033:0x45de59 [ 1229.925032][T21197] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1229.944733][T21197] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.953123][T21197] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 11:11:14 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x21, @broadcast, 0x4e22, 0x4, 'sh\x00', 0x34, 0x0, 0x72}, 0x2c) preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2, 0x10}], 0x2, 0x7ffd) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r0, 0x81, 0x8001, 0x1acc}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r4, 0xb8fb7000) preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) [ 1229.961106][T21197] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1229.969063][T21197] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.977018][T21197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000061 [ 1229.984977][T21197] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:14 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000000}}]}}) [ 1230.083726][T21215] fuse: blksize only supported for fuseblk [ 1230.279073][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1230.290127][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.301705][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.311775][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1230.325162][T25474] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1230.334528][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.343987][T25474] usb 6-1: config 0 descriptor?? [ 1230.829834][T25474] uclogic 0003:5543:0522.003C: item fetching failed at offset 0/1 [ 1230.837732][T25474] uclogic 0003:5543:0522.003C: parse failed [ 1230.852825][T25474] uclogic: probe of 0003:5543:0522.003C failed with error -22 [ 1231.031873][ T8585] usb 6-1: USB disconnect, device number 7 [ 1231.808940][ T8585] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1232.168934][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1232.179770][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.190644][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.200412][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1232.213413][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1232.222521][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.232683][ T8585] usb 6-1: config 0 descriptor?? 11:11:16 executing program 5: r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc71b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000000000"], 0x0}, 0x0) 11:11:16 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r0) r4 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r4]) write$FUSE_ATTR(r3, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x0, {0x7, 0x6, 0x0, {0x0, 0xec, 0x6, 0x3, 0x2400000000, 0xfffffffffffffff9, 0x7fffffff, 0x3, 0x8, 0x4000, 0x3, r4, 0xee01, 0x6, 0x1ff}}}, 0x78) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:11:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4000000}}]}}) 11:11:16 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:16 executing program 3 (fault-call:5 fault-nth:98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:16 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x4010, r2, 0x0) [ 1232.375588][T21264] fuse: blksize only supported for fuseblk 11:11:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5000000}}]}}) [ 1232.422998][T21269] FAULT_INJECTION: forcing a failure. [ 1232.422998][T21269] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.448854][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1232.454936][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 [ 1232.455549][T21269] CPU: 1 PID: 21269 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1232.469970][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.480011][T21269] Call Trace: [ 1232.483297][T21269] dump_stack+0x10f/0x19d [ 1232.487713][T21269] should_fail+0x23c/0x250 [ 1232.489869][ T8585] usb 6-1: USB disconnect, device number 8 [ 1232.492127][T21269] __should_failslab+0x81/0x90 [ 1232.492140][T21269] should_failslab+0x5/0x20 [ 1232.492156][T21269] slab_pre_alloc_hook+0x20/0xd0 [ 1232.512094][T21269] kmem_cache_alloc+0x4f/0x2d0 [ 1232.516863][T21269] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1232.522657][T21269] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1232.528282][T21269] kvm_mmu_load+0xb0/0x9c0 [ 1232.532765][T21269] ? check_preemption_disabled+0x51/0x140 [ 1232.538475][T21269] ? vmx_flush_tlb_all+0x4f/0x220 [ 1232.543536][T21269] vcpu_enter_guest+0x1c74/0x2660 [ 1232.548551][T21269] ? emulation_required+0x67/0x940 [ 1232.553782][T21269] vcpu_run+0x26e/0x740 [ 1232.557940][T21269] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1232.563382][T21269] kvm_vcpu_ioctl+0x565/0x950 [ 1232.568123][T21269] ? tomoyo_file_ioctl+0x1c/0x20 [ 1232.573051][T21269] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1232.578934][T21269] __se_sys_ioctl+0xcb/0x140 [ 1232.583516][T21269] __x64_sys_ioctl+0x3f/0x50 [ 1232.588098][T21269] do_syscall_64+0x39/0x80 [ 1232.592557][T21269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1232.598435][T21269] RIP: 0033:0x45de59 [ 1232.602378][T21269] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.621973][T21269] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.630407][T21269] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1232.638388][T21269] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1232.646343][T21269] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.654299][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000062 [ 1232.662256][T21269] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c 11:11:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6000000}}]}}) 11:11:16 executing program 3 (fault-call:5 fault-nth:99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7000000}}]}}) [ 1232.801503][T21299] fuse: blksize only supported for fuseblk [ 1232.862446][T21306] FAULT_INJECTION: forcing a failure. [ 1232.862446][T21306] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.895800][T21306] CPU: 1 PID: 21306 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 1232.904474][T21306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.914510][T21306] Call Trace: [ 1232.917868][T21306] dump_stack+0x10f/0x19d [ 1232.922186][T21306] should_fail+0x23c/0x250 [ 1232.926586][T21306] __should_failslab+0x81/0x90 [ 1232.931326][T21306] should_failslab+0x5/0x20 [ 1232.935834][T21306] slab_pre_alloc_hook+0x20/0xd0 [ 1232.940747][T21306] kmem_cache_alloc+0x4f/0x2d0 [ 1232.945492][T21306] ? kvm_mmu_topup_memory_cache+0x92/0x140 [ 1232.951272][T21306] kvm_mmu_topup_memory_cache+0x92/0x140 [ 1232.956876][T21306] kvm_mmu_load+0xb0/0x9c0 [ 1232.961264][T21306] ? check_preemption_disabled+0x51/0x140 [ 1232.966956][T21306] ? vmx_flush_tlb_all+0x4f/0x220 [ 1232.971964][T21306] vcpu_enter_guest+0x1c74/0x2660 [ 1232.976961][T21306] ? emulation_required+0x67/0x940 [ 1232.982058][T21306] vcpu_run+0x26e/0x740 [ 1232.986204][T21306] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1232.991634][T21306] kvm_vcpu_ioctl+0x565/0x950 [ 1232.996284][T21306] ? tomoyo_file_ioctl+0x1c/0x20 [ 1233.001196][T21306] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1233.007071][T21306] __se_sys_ioctl+0xcb/0x140 [ 1233.011662][T21306] __x64_sys_ioctl+0x3f/0x50 [ 1233.016227][T21306] do_syscall_64+0x39/0x80 [ 1233.020624][T21306] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1233.026554][T21306] RIP: 0033:0x45de59 [ 1233.030498][T21306] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.050076][T21306] RSP: 002b:00007f5e09d1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.058457][T21306] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1233.066402][T21306] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1233.074346][T21306] RBP: 00007f5e09d1bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.082289][T21306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000063 [ 1233.090235][T21306] R13: 00007fffcb7fca6f R14: 00007f5e09d1c9c0 R15: 000000000118bf2c [ 1233.110469][T21312] fuse: blksize only supported for fuseblk 11:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8000000}}]}}) [ 1233.223268][T21324] fuse: blksize only supported for fuseblk 11:11:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000140)=""/122, 0x7a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:17 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = fsmount(r0, 0xd229dc1b5dda7cbe, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) poll(&(0x7f00000000c0), 0x2000000000000185, 0x7bff) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x2, 0x0) 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x9000000}}]}}) [ 1233.383895][T21340] debugfs: Directory '21340-4' with parent 'kvm' already present! [ 1233.384870][T21343] fuse: blksize only supported for fuseblk 11:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x10, 0x0) 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa000000}}]}}) [ 1233.438043][T21343] fuse: blksize only supported for fuseblk [ 1233.531337][T21363] fuse: blksize only supported for fuseblk [ 1233.543877][T21362] debugfs: Directory '21362-4' with parent 'kvm' already present! 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xb000000}}]}}) 11:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4c00, 0x0) [ 1233.658097][T21375] fuse: blksize only supported for fuseblk 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc000000}}]}}) 11:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 11:11:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xd000000}}]}}) [ 1233.779609][T21389] fuse: blksize only supported for fuseblk [ 1233.806709][T21390] debugfs: Directory '21390-4' with parent 'kvm' already present! [ 1233.865782][T21400] fuse: blksize only supported for fuseblk 11:11:18 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0), 0x0, 0x7fbf) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x541b, 0x0) 11:11:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe000000}}]}}) 11:11:18 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f0000000180)=[{r1}, {r1, 0x1003}], 0x2, 0x7fff) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'veth1_to_bridge\x00'}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)) [ 1234.334362][T21425] fuse: blksize only supported for fuseblk [ 1234.358039][T21426] debugfs: Directory '21426-4' with parent 'kvm' already present! 11:11:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x10000000}}]}}) 11:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x5421, 0x0) 11:11:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xde, "9dde856361ccbd9bed73d2db2c1d09fc9bbcbce5903c089dafc3fd1096641220dd08f203d4cce41d587c86dbc9ce69e730c9af6783dad4cf3b9bffd50c18a743872946018dc5a10f8cba08f9a361bdcf7d919414352b4400de48845a9f2d05798f3519486bc4d15867448b3e9050dbe4dc88c89c1691eb66a30de7bef14915f4983d71f7da6d2a140af7de02fdce6df70b41b081cecfe5f51e0fe5b614bc7e661ae2802ed74c9045593ff3f7aa63b822005cfe1f14ed3403e6766857d6be0204b31e0bb7d5fce03ec1eeadf43ce6cad7acf10cb6f11ddd6763bb51dc1823"}, &(0x7f0000000140)=0xe6) syz_usb_control_io(r0, 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f0000000180)=0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x20}}, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x5450, 0x0) 11:11:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x11000000}}]}}) [ 1234.471995][T21449] fuse: blksize only supported for fuseblk 11:11:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x12000000}}]}}) [ 1234.566649][T21465] fuse: blksize only supported for fuseblk 11:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x5451, 0x0) [ 1234.656118][T21475] fuse: blksize only supported for fuseblk [ 1234.702305][T21479] debugfs: Directory '21479-4' with parent 'kvm' already present! [ 1234.800702][T25474] usb 6-1: new high-speed USB device number 9 using dummy_hcd 11:11:19 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1235.179136][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1235.191576][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.203435][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.217254][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1235.232464][T25474] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1235.241917][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:11:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x101, 0x100000000]}) inotify_init() ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x20000000}}]}}) 11:11:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x5452, 0x0) 11:11:19 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1235.289076][T25474] usb 6-1: config 0 descriptor?? 11:11:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000780)={"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"}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1235.354987][T21514] fuse: blksize only supported for fuseblk 11:11:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x20100000}}]}}) [ 1235.463245][T21537] fuse: blksize only supported for fuseblk [ 1235.779580][T25474] uclogic 0003:5543:0522.003D: item fetching failed at offset 0/1 [ 1235.787433][T25474] uclogic 0003:5543:0522.003D: parse failed [ 1235.809293][T25474] uclogic: probe of 0003:5543:0522.003D failed with error -22 [ 1235.981007][T25474] usb 6-1: USB disconnect, device number 9 [ 1236.758516][ T8585] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1237.118756][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1237.129583][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.140840][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.150695][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1237.163762][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1237.172850][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.181719][ T8585] usb 6-1: config 0 descriptor?? 11:11:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x25000000}}]}}) 11:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 11:11:21 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:21 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x200, 0x80000) mknod(&(0x7f0000000080)='./file0\x00', 0x400, 0x4ce) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x36b8}, {r3, 0x480}], 0x2, 0x8) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x478, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc444}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f9f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb11}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x83}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4857}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x14000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x680f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_NODE={0x268, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x48, 0x3, "322c481a623fba30b2b1f43353299b9e3babf83828fc212dd0f513759792e49d1c6096461ab18389bceb207eef784497e4beed2ea52bd09b69338647f587f13272e9c841"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ab7e94a10b3ab92bfbb1b820a7d71bc9965508c20b4031baa81e40"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "51e3fe64c5ab1d2b08a3a6c2745195d37d7b0fc987cfec6b202a4074a54a00a4babddec22de46da23336151d36dbdfe176f31eea19abda56d1ada2428534795d784fb8ffb982a9252fbfd88392816aa536cd9951972fbca6403a95cd0f9980b63a49b57a2c099c306c3267392e6c895312a534e42b9a01531edd4825cf756d77cd732a2e41c17bc777252ad95e77b69905b09bead421061c56769625b092b8c590873027edb91174b1b8aa22f0720dff001ebb8c83f18cb1e1be1cc4a6405a2fb24fc70024624d7467ba9df7883e2b73caaee912832c45068de9615066"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x97, 0x3, "cc184d2207b603223b614eeb9854f5626ae03fe0ee4267d189a5388a1278413206b0eb44d18dbdae4a12b707c34ca6867fc09e92a00f40468a287009ce60796fb4926a63ef42b305b658549e7380b26cad11087d61112c91506247997e2c5d11d64487d73c0eab0a3537b79afc5aba34b1f9adf5868594ec2d8391d315151b4073b08291d597d27bf1739183cb01533f8c3693"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "63a9dfdb214be9c797b87d8fe4b37861504fd6a67f0c6d116811c16bc462711eed"}}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x44}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 11:11:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2e, {0x2a, 0x0, "ed2c276c606816a53a088057433f7271198dabceaa0d01d77a574f92f9000000887e3101751164c7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "ff00b142"}]}}, 0x0}, 0x0) 11:11:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x48000000}}]}}) [ 1237.567488][T21581] fuse: blksize only supported for fuseblk [ 1237.592012][T21582] debugfs: Directory '21582-4' with parent 'kvm' already present! [ 1237.598450][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1237.606092][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 [ 1237.618074][ T8585] usb 6-1: USB disconnect, device number 10 11:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x6364, 0x0) [ 1237.670501][T21605] fuse: blksize only supported for fuseblk 11:11:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4c000000}}]}}) 11:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8913, 0x0) [ 1237.796781][T21621] fuse: blksize only supported for fuseblk 11:11:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5c000000}}]}}) [ 1237.837272][T21624] debugfs: Directory '21624-4' with parent 'kvm' already present! 11:11:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8914, 0x0) [ 1237.920912][T21634] fuse: blksize only supported for fuseblk [ 1237.958182][T21639] debugfs: Directory '21639-4' with parent 'kvm' already present! 11:11:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x60000000}}]}}) 11:11:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8933, 0x0) [ 1237.969886][ T8585] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1238.050069][T21651] fuse: blksize only supported for fuseblk [ 1238.091076][T21654] debugfs: Directory '21654-4' with parent 'kvm' already present! [ 1238.328763][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1238.360050][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 11:11:22 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x68000000}}]}}) [ 1238.410813][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.424347][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1238.451346][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1238.461908][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.474569][T21677] fuse: blksize only supported for fuseblk [ 1238.482970][ T8585] usb 6-1: config 0 descriptor?? 11:11:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000540)="2ef3430f09437e0a66b8b0008ee8660fc6643403eeb805000000b9000001000f01c1f240c0c7210f06f34309a07b0a00000f01dfb805000000b9000000000f01c1", 0x41}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000200)=0x8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400000, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f00000001c0)={0x5}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket(0x29, 0xa, 0x401) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x20048080) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1238.949657][T21589] udc-core: couldn't find an available UDC or it's busy [ 1238.956603][T21589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1239.028333][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1239.034314][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 [ 1239.042666][ T8585] usb 6-1: USB disconnect, device number 11 [ 1239.738284][T25474] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1240.118248][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1240.129400][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.140834][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.151018][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1240.164195][T25474] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1240.173636][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.183766][T25474] usb 6-1: config 0 descriptor?? 11:11:24 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001340)={0x0, "e31a4ea13c7abc88c6f739f200b30e39"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002340)={r2, 0x2, 0x7ff}) 11:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8983, 0x0) 11:11:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6c000000}}]}}) 11:11:24 executing program 1: perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:24 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1240.430372][T21711] udc-core: couldn't find an available UDC or it's busy [ 1240.437321][T21711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:11:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000404355220540000000000109022400010000000009040000fd0301000009210000000122010009058103000000100069a9583ca3124cf7e3315af7c6"], 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfff]}, 0x8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x1000, 0x0, 0xa7b3}) r2 = syz_usb_connect$cdc_ncm(0x6, 0x7c, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x60, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "48e9"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xff, 0x40, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x11}, [@obex={0x5, 0x24, 0x15, 0x7ff}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x7f, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x38, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f, 0x7, 0x7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x0, 0x2, 0xff}, 0xd7, &(0x7f0000000280)={0x5, 0xf, 0xd7, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x82, 0xff0f, 0x6, [0xff0000, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0xe, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xff, 0x1, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x9, 0x101}, @generic={0xa3, 0x10, 0x1, "961f93998d6948472739565efce8b8269cf555e3b322676905381613ec21a2ae8b4e2f194a49c7617fb39df79150aaa6c2b15b5e1da3d15174ac0d8038ba170c6a5802ea69cb684a101e9778357231454d812f0757888cdbe6dbcad4965eb29f80378d5c9c721c4883bbc0c859a8d41a2bb70d56fe7899f744ed0f47bd6b615d9a8ee870d71619c5e2b850dc6390f977d2c240cbe1c21060f0bf0fb3d0e57521"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x405}}, {0xfa, &(0x7f00000003c0)=@string={0xfa, 0x3, "98ac4555448d3b6178f5b19c2c9bb90b15fb0b5458fcfe3adcbb6f265c713fe8a152f4159c123176d5bc00642971521a448121c5ed0b491d5e3e1905a39bf7dc8aa58bdf3c7ed9695a5b5e9c36374002d0e8e10f7593667caddbc042e18b5c350f998a52c369768a3518c7deb8ea6f86253c440bf46469504be270db776520a5ef161ccf8131ad7c483114551fa4a4b511a53075a658ab156baac822c6bc9c42774384d6aa7f87b2c35f202a0bd2b32805aa4978749ad569a9a2efa73b9dc3440f6bcea559fd1102a955b1b038a7a93defaa1d9a5fca690660c54f3b4479b79ce450f88323b04692aed4a95c058bb0ab9379d2d014f7d5f8"}}]}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0xbb, 0x1, 0x7fff00, 0x6, @mcast2, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x10, 0x100, 0x7f}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) [ 1240.493867][T21721] fuse: blksize only supported for fuseblk [ 1240.521080][T21726] debugfs: Directory '21726-4' with parent 'kvm' already present! [ 1240.529105][T25474] usbhid 6-1:0.0: can't add hid device: -71 11:11:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x74000000}}]}}) 11:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x89a0, 0x0) [ 1240.538318][T25474] usbhid: probe of 6-1:0.0 failed with error -71 [ 1240.556717][T25474] usb 6-1: USB disconnect, device number 12 [ 1240.616288][T21748] fuse: blksize only supported for fuseblk 11:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x89e8, 0x0) 11:11:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7a000000}}]}}) [ 1240.737420][T21762] fuse: blksize only supported for fuseblk [ 1240.739686][T21761] debugfs: Directory '21761-4' with parent 'kvm' already present! 11:11:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8cffffff}}]}}) 11:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) [ 1240.842937][T21777] fuse: blksize only supported for fuseblk [ 1240.852769][T21778] debugfs: Directory '21778-4' with parent 'kvm' already present! [ 1240.979883][T25474] usb 6-1: new high-speed USB device number 13 using dummy_hcd 11:11:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc0ed0000}}]}}) 11:11:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 11:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) [ 1241.339358][T25474] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1241.372555][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.388176][T21802] fuse: blksize only supported for fuseblk [ 1241.408256][T25474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.438904][T25474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1241.469527][T25474] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 11:11:25 executing program 1: perf_event_open(0x0, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x3, {0x4, 0x1, 0x6, 0x0, 0x8, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf6ffffff}}]}}) [ 1241.484572][T25474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.507883][T25474] usb 6-1: config 0 descriptor?? [ 1241.543541][T21823] fuse: blksize only supported for fuseblk [ 1242.058106][T25474] usbhid 6-1:0.0: can't add hid device: -71 [ 1242.064346][T25474] usbhid: probe of 6-1:0.0 failed with error -71 [ 1242.088190][T25474] usb 6-1: USB disconnect, device number 13 [ 1242.748048][T10115] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1243.159417][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1243.170225][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.181326][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.191176][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1243.204170][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1243.213245][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.222164][T10115] usb 6-1: config 0 descriptor?? 11:11:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000000)=0x72a, 0x4) 11:11:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf9fdffff}}]}}) 11:11:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 11:11:27 executing program 0: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 11:11:27 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX]) newfstatat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/urandom\x00', 0x8000, 0x0) r4 = syz_mount_image$hfs(&(0x7f0000002700)='hfs\x00', &(0x7f0000002740)='.\x00', 0x7, 0x8, &(0x7f0000002b80)=[{&(0x7f0000002780)="87ac12a9ee852b330b8a47a688b24975ef4860c56933", 0x16, 0x80}, {&(0x7f00000027c0)="c59736366bc0354ff84d1dc55f440d6560e95ccf93c6d5cf2f74e6996d60", 0x1e, 0x3589}, {&(0x7f0000002800)="bfa318cdaec1c3febb32d87b643602a5575f4b3aabc4c47b2b9118785d9317182b6802596a07e6f84412f9079a837e0a751e13f92ca527ce47b0c6bcda476a7481d463196a43b75cdac101a41abd4dcf1a055e2b6c02e8612c2ac814b3616a1c0e26e1c7d5691e20a5f2636b2ddc8060de84820721e2e3f32c04966d2c5e65f92c3f67ba04", 0x85, 0x8}, {&(0x7f00000028c0)="1559c01455f9057d810dd05b8f275205ccf1ef61", 0x14, 0x36}, {&(0x7f0000002900)="aedb10059d97373a36fd7a9de0e0f06b0a37f345c334d54109e2668c8e5d5e070c9c384977231058cc6bf5bf3ef6e7bf79590e6369757e3c7494fb479d272179253e3451d585a4c5c1023af410d5610fc434da483aee99cfabe99e474fb6f543280d23bb9c69e5066df4d8651ef936", 0x6f}, {&(0x7f0000002980)="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", 0xff, 0x400000000000}, {&(0x7f0000002a80)="3142ef8f5d939e92a5a57149d7411cde8e6921ada8bd0c3b782bfd5ecfb3282ace3cccc6bc61c023399146740330fa38e9835554a091df7c4061ebd355c7bd4ba8391c9e991b588fbc71d6dbea3ba79c07a90c7d7dc1f8f027edf1782807c39cfa0c6fc2707eeb79ebc262684570375253faed9a0931d16c4764184cf27b90", 0x7f, 0x1}, {&(0x7f0000002b00)="099dc4fd99054875f8daa8a7abaaf24ee46ee19dce7bafbde716059751e417346a36ded39f3512d168ba13ac9468c32d4dc6cd143252d7cb15fd8231b8a47f45439be163a9821043733476ba377eb84c4dd5f481499a60563ecfc76fb9", 0x5d, 0x85b}], 0x0, &(0x7f0000002c40)={[{@umask={'umask', 0x3d, 0x8000}}, {@codepage={'codepage', 0x3d, 'cp775'}}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid={'uid', 0x3d, 0xee01}}], [{@permit_directio='permit_directio'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, '/+-'}}]}) r5 = getpid() r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x16, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x201, 0x0, 0x0) getgroups(0x7, &(0x7f0000003440)=[0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0]) read$FUSE(r0, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="28faac81e4be70c2456c0d61ee3dfd8dad384ca51a38db29ab4742b8eee8e400691e833df2fa6f5dc141862db25a8e8be67c019f4ef93681aeb819f60915ac52c4542495ab53feea26874e512f2233b5066d1e57bdbbf00e1a4441e743c90b6bf5834253bfc89d148995c276adee424e0671d14aa7a25e0c7a488ce3da430d156c9f2471e8c97cb513df13315264b9148b22cbd4adc04428d1d449892aa43b311aeb", 0xa2}, {&(0x7f0000000080)="bc5577892c1aade55da3c4192542293902db5b67bee0", 0x16}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000240)="5cf312a702b0fde06a9eb78b81d99d20", 0x10}, {&(0x7f0000002340)="e26144d62ce415b6f719c0f11f376e8f434716007c5ee8759986f5eb72e87b30c8947b6a47075ae98434943b295a27cfd0fecf3b7e38fe3f4b5babd99e1f78c10d8fb0ddb8cf83b0b88c2c03b6dd5619da9f4de29a9725b1ea8fe0274a415fef3143840b832bf3a9e0cb85beabb7c791746b606152f43b3ba96fd936002f1ea9234b6aeb1ade319c543e47bb1462ef3c826c07215751e6428e25b5d82a1a05a550e1fa6403376ba6ca52d3b3d0dd1d631e5cde94cddbdfeb0d6e5917266fbced2d78b5b366d9f5fa30a0409ed95a81a4f3c3b02b25454827397e1a5b45", 0xdd}, {&(0x7f0000002440)="93d0bdd9823b7c3021490bc66d9533dca0bba5e552c80902d2f8d2468e17b8ed975afb97d0b2f4a8656b7aab09fa69f84260ebf1fd55477b07b7e35de610f3733673eed398b106c23650cc35e7865f2fe7e81d31b5daf3d6a4e36a8215cdff60fcea06498712ddcd430a522bb4edfe14d7fb47d9daa309c35f7ebfa2002e48a10947f6c2ba9015c2e5291b163547dedcc1a28804fff56a57934b2c45fea0e390f14f7bccb3bf65ea8b748f8fddb9f4e3faf6e7d16f5ebac45d483839b3f9db98c354bb6f8fe890e794f6f6d4efd522acf1f328e0e0899c7508798c9da7ff4873de76afd1ee519259003021c2dc68f7", 0xef}], 0x6, &(0x7f0000003340)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0], 0xd0, 0x20000000}, {&(0x7f0000002e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002ec0)="23460d3ff2bd86984c7119c70acd8b973ad1043afbf21b1a04cfe42951609393a5fd7f02d13c9b74c4a9795745b7f6066da2ebf9a10eae1d0e601b82601e8b06f8cd07c7f9bae25966a959f6e04e0c4a4ea71df98db324ce3fc7db24598152642989920d54777b7378f552dfddfa38bfedeb4489", 0x74}, {&(0x7f0000002f40)="0d336ca1f14225b45fa6ce664b51b95b119973d64f51080580d3fb77d8469217ab15c8e4c3bd4fc024052bbf426953004c23ce0611e6dc84f769f4cf078eb1470207edbe9b135010a758c2e59f607a4a4ce99e21ceaefda48e89ee894e4d616fd40e6a5083bb9f8eba06cd6508907572a2d0", 0x72}, {&(0x7f0000002fc0)="b4dd91e61af6a5c12bf86bb97666722d5abb84d511d2f53897531b87f4510a9110fb6a9bcaf541b727c232f6e661eea4769db60bc87cc193988e91adbfa9402d01927c", 0x43}, {&(0x7f0000003040)="1f2cab8e48d7edefa7d727f8e021d5", 0xf}, {&(0x7f0000003080)="b603ced156a0a690869119c3f07b235b678a995f99c8952c4ba70c57f387c4bb92a80cb38bb09db60f9428ef6bd295108a15706c9b65e7cb07e4bed5bafa5b06fa4445ecf9f5cf0936b35d07b3a1bb0054828ac858fe8b2242cc99f43736132acca39cb46f1262e90b33489accacd76935b8386e2dc19c82c0a3c49bfd0146b31ec21c7ee1db8df3ade5b8cbbb04564d628ec81019fdd173a57a13a211baa72dcd92a50bb57114d394ff12c231c005e3c0", 0xb1}, {&(0x7f0000003140)="9651c2eba30b1b61ad8aafcc57d333db24e39d868784d5dfb053fe4efc7ee28d991ec395a8a768b6da5811b5841eea74d12934aa260cf019e308221a98745ea4d45f964f9efb4dbe", 0x48}, {&(0x7f00000031c0)="175ff7111616a010b50b59bbcd807f2f74660d353adf2f783cbb7f053c09febb1519ee22e6d0b38f9ff9d73e4629f7c2bfaeadc2108270daef16a227cdedebd5664d268a351614bd2d83fdeb2b77a5f4fd15a862544c14782f27c1ba55d5ba69b5bb36dcf172b2f46c714e17e79b5430a0ddf072db7c4a36bc6a5e9771235fb92be1b02bb16480a07a7df963b287418b0b0d91cf50ea82cccf1962445f99214fa807bd9f6184ef4d227cabfbe79d8993eec0e53dbad49a34d123542317eef0036e37c029e7169d62a9c8", 0xca}], 0x7, &(0x7f0000005b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000469b1bcdfa1c400a7c141e377cdb7f5b9e91f2a6f37e7269da884cb01dee530b952254cafba0b8bb6e8eff85fc43249aa1f9327227e45d5d10185794396b95fdb3a49503f05fc82cde9d60f926cb68a07ab4762651191f4a627ba801f7bd4c9a079198299a3753e16744f27fe750e1b5dfc03923b654a847dea3314ea08a93a1cef1d762a9d780f3749ff6199f6a614601f289a1687ce430fda1fe391b108e40223a2dfece68b8e88f3ce96a1deb60ccaa60ad027e15f590953472d7d2dd8fa720c2e8", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4000000}, {&(0x7f0000005540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000055c0)="dbea04c74ddb71e0c2b94fcaab3817bc128be237a03057495a21704fde4bcd2d365eb5067d040e78b135a93d7cb5a1887bff997ebf4506d86a53fc9c874e02c82d1a581fe358a298fd6523965824267bc2fb894f05322f34b694d56d558b0d1e9697eaae5de8b9a2965139be78465cd0ff954c1d3827873a34fc83b5c202193477147e14aa2022bc3d345d07b9d4cf16", 0x90}, {&(0x7f0000005680)="94f94b738f631300cd902cb7433bd4714ca5be89ce13f7e073259cac2331315a68f7b9c51f9c20664637f91e7e9b0018f67c7efe99c501c3bea41fc89cdaea87484143bb5c59860c65082b1db480812d817c23910114d9927b55b564e53506c2e2eb79c9d3ef07281c8d9638efe512c4e7611b662fb64fd3cb4bf8ac7358a7057c40c6db5e3a1439c4bf16c551c440841afed71599", 0x95}, {&(0x7f0000005740)="4235bb036c68", 0x6}, {&(0x7f0000005780)="0dd683d5af414532508f21fb5f234bcb988a9cbace287eab38c79bfed204816c84b024ada432ac919603a93428642ab340f191bbaad876c81dfe1139a1", 0x3d}, {&(0x7f00000057c0)="b0dbfde4eb9ed3c6c3108781038931d3b57ebd4777761391a866c521", 0x1c}, {&(0x7f0000005800)="1448ec6b259fb50b7797dbbf2aa424e8fc4e43274909bd8b06e98e20928b42950b3ad473b38071ead1194515a341734a0dbaefbe6ccfd1d4d9c37cac87fae38bafe6a3db28e349faa8eeaf5119cee96cedf0695d76eed977e7280955731320a68fab0a25a720e68a631984f8e99feafec8bcd03e", 0x74}, {&(0x7f0000005880)="c03a83f1d3dfa0e0ca0f9a4796bee1738ee3cec1381718940f5854806d3637b8eb2d863872387f425d0a6f0e3e27a6c9cadfeff394d57aa4a3ccd147ddf2f4237ce5dc2e526a1798fa832bc2efa4aaa61de2dcd85876e8d6cbcf47f590e666f3fc58c9adc0bbbf0a9bcae3983aebdd1a275514ea2b489757efdd21bf53ae1a95dc4f7c65", 0x84}, {&(0x7f0000005940)="9d07f018bc57289b73129adfaa2ff33ce016576dea85688ac24b649bbe5782262e74ee2f7d78dedddf2ae091f7acb72a76f0f2f4f3760a04b92f6317751615388e918234412af269528797dbdcb1249b79f735cf085f195c4151b37cbec6f802637e663863f8c189efa70714df4c9047846c4c4e35d8389f015aafffc5a82a1a", 0x80}], 0x8, 0x0, 0x0, 0x40040}], 0x3, 0xc010) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r11}], 0x1, 0x7fff) read$hidraw(r10, &(0x7f0000000340)=""/4096, 0x1000) 11:11:27 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x33}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfeffffff}}]}}) [ 1243.601454][T21869] tmpfs: Bad value for 'uid' [ 1243.611282][T21871] fuse: blksize only supported for fuseblk [ 1243.621072][T21869] hfs: unable to parse mount options [ 1243.630191][T21870] debugfs: Directory '21870-4' with parent 'kvm' already present! [ 1243.638485][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1243.644685][T10115] usbhid: probe of 6-1:0.0 failed with error -71 11:11:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 11:11:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xff000000}}]}}) [ 1243.671368][T10115] usb 6-1: USB disconnect, device number 14 [ 1243.710470][T21887] fuse: blksize only supported for fuseblk 11:11:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfffffdf9}}]}}) [ 1243.750914][T21896] debugfs: Directory '21896-4' with parent 'kvm' already present! [ 1243.766106][T21906] fuse: blksize only supported for fuseblk 11:11:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 11:11:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xffffff7f}}]}}) [ 1243.829590][T21913] fuse: blksize only supported for fuseblk [ 1243.844809][T21915] debugfs: Directory '21915-4' with parent 'kvm' already present! [ 1243.910936][T21926] fuse: blksize only supported for fuseblk [ 1244.048008][T10115] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1244.402731][T21898] tmpfs: Bad value for 'uid' [ 1244.439462][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1244.454934][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.474141][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.485546][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1244.509426][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1244.519108][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.530644][T10115] usb 6-1: config 0 descriptor?? [ 1245.018654][T10115] uclogic 0003:5543:0522.003E: item fetching failed at offset 0/1 [ 1245.026681][T10115] uclogic 0003:5543:0522.003E: parse failed [ 1245.039431][T10115] uclogic: probe of 0003:5543:0522.003E failed with error -22 [ 1245.220465][T25474] usb 6-1: USB disconnect, device number 15 [ 1245.987783][ T8585] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1246.347728][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1246.359374][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.370486][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.380400][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1246.393408][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1246.402542][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.411359][ T8585] usb 6-1: config 0 descriptor?? 11:11:30 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00229cdb0000099c"], 0x0}, 0x0) 11:11:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 11:11:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xffffff8c}}]}}) 11:11:30 executing program 0: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 11:11:30 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x1}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x7) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x40800, 0x84}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:11:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x40186366, 0x0) [ 1246.670111][T21985] fuse: blksize only supported for fuseblk [ 1246.707739][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1246.714184][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 11:11:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfffffff6}}]}}) [ 1246.734554][ T8585] usb 6-1: USB disconnect, device number 16 11:11:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x401870c8, 0x0) [ 1246.775779][T22004] debugfs: Directory '22004-4' with parent 'kvm' already present! [ 1246.787458][T22017] fuse: blksize only supported for fuseblk 11:11:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfffffffe}}]}}) 11:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 1246.860515][T22024] debugfs: Directory '22024-4' with parent 'kvm' already present! [ 1246.889682][T22032] fuse: blksize only supported for fuseblk [ 1246.919771][T22038] debugfs: Directory '22038-4' with parent 'kvm' already present! 11:11:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x4, "dc"}]}}, 0x0}, 0x0) 11:11:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xedc000000000}}]}}) 11:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 1247.210093][T22054] fuse: Bad value for 'blksize' [ 1247.250923][T22056] debugfs: Directory '22056-4' with parent 'kvm' already present! 11:11:31 executing program 0: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 11:11:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000000000000}}]}}) 11:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) [ 1247.504868][T22075] fuse: Bad value for 'blksize' [ 1247.508176][T22077] debugfs: Directory '22077-4' with parent 'kvm' already present! [ 1247.517700][T14845] usb 6-1: new high-speed USB device number 17 using dummy_hcd 11:11:31 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000880)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:31 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) r2 = io_uring_setup(0x63a9, &(0x7f0000000140)={0x0, 0xa349, 0x0, 0x0, 0x2c4, 0x0, r0}) r3 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r3]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2010000, &(0x7f0000001340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '/proc/vmallocinfo\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/vmallocinfo\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000040)) 11:11:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x40000000000000}}]}}) 11:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 1247.763152][T22107] debugfs: Directory '22107-4' with parent 'kvm' already present! [ 1247.780238][T22111] fuse: Bad value for 'blksize' 11:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 11:11:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x100000000000000}}]}}) [ 1247.860896][T22122] 9pnet: Insufficient options for proto=fd [ 1247.909499][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1247.939213][T22128] debugfs: Directory '22128-4' with parent 'kvm' already present! [ 1247.943250][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.949685][T22134] fuse: Bad value for 'blksize' [ 1248.026219][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.059989][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1248.099562][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1248.119656][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.138375][T14845] usb 6-1: config 0 descriptor?? [ 1248.649844][T14845] uclogic 0003:5543:0522.003F: item fetching failed at offset 0/1 [ 1248.663262][T14845] uclogic 0003:5543:0522.003F: parse failed [ 1248.697577][T14845] uclogic: probe of 0003:5543:0522.003F failed with error -22 [ 1248.850834][T10115] usb 6-1: USB disconnect, device number 17 [ 1249.627528][T14845] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1250.017498][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1250.028338][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.039233][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.049139][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1250.062274][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1250.071403][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.080941][T14845] usb 6-1: config 0 descriptor?? 11:11:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') 11:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 11:11:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200000000000000}}]}}) 11:11:34 executing program 0: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 11:11:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x1410}, {r0, 0xa8}, {r0, 0x2204}, {r2, 0x14}], 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000180)=""/27) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x8, 0xa6}, 'port0\x00', 0x5, 0x101078, 0x7, 0x4, 0xfff, 0x1f, 0x80, 0x0, 0x7, 0x3}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1250.252201][T22177] debugfs: Directory '22177-4' with parent 'kvm' already present! [ 1250.269920][T22187] fuse: Bad value for 'blksize' 11:11:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x300000000000000}}]}}) 11:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x80086301, 0x0) [ 1250.307395][T14845] usbhid 6-1:0.0: can't add hid device: -71 [ 1250.313402][T14845] usbhid: probe of 6-1:0.0 failed with error -71 [ 1250.335698][T14845] usb 6-1: USB disconnect, device number 18 [ 1250.368752][T22205] fuse: Bad value for 'blksize' 11:11:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400000000000000}}]}}) 11:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 1250.417073][T22210] debugfs: Directory '22210-4' with parent 'kvm' already present! [ 1250.481651][T22220] fuse: Bad value for 'blksize' 11:11:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x500000000000000}}]}}) 11:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 1250.602287][T22235] fuse: Bad value for 'blksize' [ 1250.627718][T22236] debugfs: Directory '22236-4' with parent 'kvm' already present! [ 1250.717352][T14845] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1251.108811][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1251.129333][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.141106][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.153004][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1251.166686][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1251.186728][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.198334][T14845] usb 6-1: config 0 descriptor?? [ 1251.678398][T14845] uclogic 0003:5543:0522.0040: item fetching failed at offset 0/1 [ 1251.686545][T14845] uclogic 0003:5543:0522.0040: parse failed [ 1251.700876][T14845] uclogic: probe of 0003:5543:0522.0040 failed with error -22 [ 1251.895103][T14845] usb 6-1: USB disconnect, device number 19 [ 1252.667226][T10115] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1253.027468][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1253.038399][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.049911][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.059989][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1253.073439][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1253.082763][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.091671][T10115] usb 6-1: config 0 descriptor?? 11:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 11:11:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600000000000000}}]}}) 11:11:37 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000001340)=""/4108, 0x100c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 11:11:37 executing program 0: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r0, 0x500}, {0xffffffffffffffff, 0x262}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 11:11:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x624842, 0x42) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0xe1, 0x3f, 0xa953}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x4, 0x0, 0x200}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="c60c11078da0628e640edb095001000024000b0f000000", @ANYRES32=r4, @ANYBLOB="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"/312], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x80}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001c1}, 0x84) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getpeername$netlink(r2, &(0x7f00000001c0), &(0x7f0000000340)=0xc) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11:11:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x403, 0x97c1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:11:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x700000000000000}}]}}) [ 1253.309060][T22289] fuse: Bad value for 'blksize' [ 1253.328853][T22292] debugfs: Directory '22292-4' with parent 'kvm' already present! 11:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1253.367344][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1253.373378][T10115] usbhid: probe of 6-1:0.0 failed with error -71 [ 1253.402448][T10115] usb 6-1: USB disconnect, device number 20 11:11:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000180)=""/213, 0xd5}], 0x3, 0x8001, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1253.441666][T22320] fuse: Bad value for 'blksize' [ 1253.464777][T22320] fuse: Bad value for 'blksize' 11:11:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800000000000000}}]}}) [ 1253.488621][T22329] debugfs: Directory '22329-4' with parent 'kvm' already present! 11:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1253.533326][T22341] fuse: Bad value for 'blksize' 11:11:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x900000000000000}}]}}) 11:11:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00000000000000}}]}}) [ 1253.604255][T22347] debugfs: Directory '22347-4' with parent 'kvm' already present! [ 1253.611830][T22353] fuse: Bad value for 'blksize' 11:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc018620b, 0x0) [ 1253.700042][T22362] fuse: Bad value for 'blksize' [ 1253.719590][T22363] debugfs: Directory '22363-4' with parent 'kvm' already present! [ 1253.757121][T10115] usb 6-1: new high-speed USB device number 21 using dummy_hcd 11:11:38 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fbf) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) 11:11:38 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xb00000000000000}}]}}) [ 1254.118880][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1254.150041][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.158248][T22381] fuse: Bad value for 'blksize' [ 1254.183091][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.204980][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1254.234093][T10115] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40 [ 1254.255813][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.307208][T10115] usb 6-1: config 0 descriptor?? [ 1254.787633][T10115] hid-retrode 0003:0403:97C1.0041: item fetching failed at offset 0/1 [ 1254.795888][T10115] hid-retrode: probe of 0003:0403:97C1.0041 failed with error -22 [ 1254.989382][T25472] usb 6-1: USB disconnect, device number 21 [ 1255.756976][T10115] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1256.146994][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1256.157824][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.168751][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.178508][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1256.191888][T10115] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40 [ 1256.200971][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.210264][T10115] usb 6-1: config 0 descriptor?? 11:11:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10000000140, 0xb05, 0x183d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0xfd, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x5, 0xff, 0x1, {0x22, 0x402}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:11:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00000000000000}}]}}) 11:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 11:11:40 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r3, r4, 0x16, &(0x7f0000000000)) syz_open_procfs(r3, &(0x7f00000001c0)='net/ip6_mr_vif\x00') r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x408000, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:11:40 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000001340)=""/4109, 0x100d) 11:11:40 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1256.349260][T22427] fuse: Bad value for 'blksize' 11:11:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xd00000000000000}}]}}) [ 1256.381081][T22431] debugfs: Directory '22431-4' with parent 'kvm' already present! [ 1256.416977][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1256.424698][T10115] usbhid: probe of 6-1:0.0 failed with error -71 11:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 11:11:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00000000000000}}]}}) [ 1256.441431][T22447] fuse: Bad value for 'blksize' [ 1256.452854][T10115] usb 6-1: USB disconnect, device number 22 11:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 11:11:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfffffffffffffff}}]}}) [ 1256.533603][T22459] debugfs: Directory '22459-4' with parent 'kvm' already present! [ 1256.533904][T22462] fuse: Bad value for 'blksize' [ 1256.626691][T22472] debugfs: Directory '22472-4' with parent 'kvm' already present! [ 1256.638192][T22475] fuse: Bad value for 'blksize' 11:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xc0481273, 0x0) [ 1256.672211][T22475] fuse: Bad value for 'blksize' [ 1256.738302][T22486] debugfs: Directory '22486-4' with parent 'kvm' already present! [ 1256.846875][T10115] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1257.268244][T10115] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1257.326872][T10115] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1257.334422][T10115] usb 6-1: can't read configurations, error -71 [ 1258.026773][T10115] usb 6-1: new high-speed USB device number 24 using dummy_hcd 11:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x2) 11:11:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000000000000000}}]}}) 11:11:42 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:42 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, 0x8) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x51, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1612, 0x404800) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x210801, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:11:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0xbd4, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x86, 0xbc, 0x7f, 0x10, 0x13b1, 0x3b, 0xbaff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc2, 0x4, 0x7, 0x0, 0xc0, 0x7, [{{0x9, 0x4, 0xb8, 0x9, 0xc, 0x1a, 0x4c, 0x91, 0x7, [@generic={0x46, 0x3, "84a0c66f57157dae7311936516dc4fa0da5f9dad98eb4dc5ed92024551840ed72641b0306565ce98e05c24ef6e3a72548f6f52c1a694029f62763435dea81eb92a0f5116"}], [{{0x9, 0x5, 0x80, 0x8, 0x20, 0x0, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xb256}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x8001}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x20, 0x0, 0x80, [@generic={0xbc, 0x3, "e4bbdd635854ac974181c054f4a2bc082408a3fe15cd4daad943979833f65285045efb755f87cb57af45f1cc6ce11105507dfc30551cb72ea9d75a344ec0aafc70d4a8cd162f7264cb3b7351d6244617529575be4c8a946ce5db0bf41fbb13ad4070eaed3bd7da71991e4f620f1f41a13ba019b085795f062fad7df011b6e3d162ea78931c3ca2b4b65c7cd32023a35f509f65e6a2dd0791d83c61f7550dfef43663857bf79985ba74531c2a9c89e170f2ef4b5c3ba47d8f4935"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7f, 0x3, 0x3f, [@generic={0x2c, 0x23, "60e9a30524b7ff9c899e851e4c7179a63e58f071f0137326426263ca3e9725ca38730d0cb379cd046cf5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x1b09b8903cdc6473, 0x8, 0x0, 0x9, 0xc8, [@generic={0x90, 0x21, "f55813d35c34f874025d757a66074a96b932c530f0865de621ffedc666ffc5d53de8929fb3de51dc68d78002d80dff8c2f88b34d446068cb607fd5fc0cf93218f25490bc1980b80ff0243e32682bf4621669ff7d1227ba72cd8d17c0a96a65d3f70f04c26eeb421ee40f54667f91194c9c4973449034193789b401e578768e211bbc12e3e7bb6ddfb2d6ca39e947"}]}}, {{0x9, 0x5, 0x3, 0x1c, 0x3ff, 0xe6, 0x1, 0x70, [@generic={0x27, 0x21, "9726fe488a2f269c148036eac29fd41464078f714ad23f5c521a4521c6bd787f746b3c7ad1"}, @generic={0xb9, 0x31, "0a6d2af992097fc5cabc425c3f420a9443e9edc7701bb4f59ed228ade5583d771967c7fef001990b00738f3454f46ffdc95d64e7d9e2eb80fb6325edcb1d8583da5e0b95ef562ce5d4b057f5c42e3606e3e89b050a653b3428a3133b6c97e32dc7e2933ec7d0628599fc7ff2bf6048f174f39dce3a67b33d7805fc8144d76c155e67d28d2de359842905ebf8f0207b49c664564617eb99732d9501b41842d77839e6040b5ecc30523cb0dcc74fe0b6a395b2ad96ab3fcc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x7f, 0x8}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}, @generic={0x4e, 0x2, "365d6e69f90e7ed4bde48eb6cb67b39f25c7cac55b364b1496484664729775d93dbbb78ca593a7919216cbd54526ab0580dbd43761f0f60023178cb2ca2ed7000004c98879920d22657afbb5"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x6, 0x80, 0x8, [@generic={0x72, 0x8, "33cc0a9668355267bc1b4ff16e84a4dcd0296549b521a8d9680979cce4b89cee02a485fc546bd806f7aff0bb67f608fb59cbb0015a0899306ca59f738ec68fc727f4d251ce8ce3c9ad2f38d30e1a0b40e7f5a2a536d5826d075ed5d682bb87ff293643f1d5bfed352618bce7a46f1c77"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x40, 0xfb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}]}}, {{0x9, 0x4, 0xad, 0x6, 0x5, 0x32, 0xc3, 0x68, 0x5, [@generic={0xdf, 0xf, "e960cdf20e41b83e90db50e43762321b9afbf9963ad6907f5a87e68a3ac47e2d2dc12d75d9095ec822088d4cd52f4b8f3559bdf7765c6a864c54dda0dc630328cbd0dedc05995dc0a7357a977b8f8adef7d719bb278b173210cf244dad92128374facbaf385d4ac8912e8d7dd58b6b04969b317157bda9bf7614d0bcb744e9b41d32d9119b5bbb3d6633db0975e56ce201ec7946f9c8be5ee047573f13a023c743e069cb4b8ab490ee277a5f8b0fbef7d28fc7ab463be8821819472bcec90657588c1787ec5bef737e41d22b4c700eae9a8c066e3cb03f76b76ff38651"}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x7f, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x4c, 0x20, 0x2, [@generic={0xc5, 0x22, "682bfba8318ae40afdda5a1f3030565be9f3b6a580fd362cd3bd3cd15e6a9265a9fe9e53cc764b194e14021f45547b88caf3912c15271930a5070ba7120c54cd4696837cad62b91e2dfde6144af8b213ee57ab5cbba63981625543f8bb54d58c6fcd1e15c47f792223ba2b71385cbb22ee7674b49910506d0161d1c996e3fce77fce870d22768fd4831df2c0c2af83dab2fb0feaff3380dd1b4d0a776cce0fb39bc8fcf5106167e3c2ea2192130f8765f55afd1113db5733f66b2d318d9343790a0765"}]}}, {{0x9, 0x5, 0x76c50a083786ce97, 0x3, 0x200, 0x0, 0x9, 0x80}}, {{0x9, 0x5, 0x1c5f26b3db94adfa, 0x0, 0x8, 0x4, 0x81, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x1, 0x8, 0x5, [@generic={0xa5, 0x6, "5141c9e502c8abef21b22a13996d9f4b9ddf33bc9d1992722bc0833a56e058c08157f0df743e706742901ab784f33878b4e3704f0e77e040b0852135c40401a36ae290ceeaa064c1c98b158b20e9006f7797cc4d9b60e4eebf5550ba336e111436db6844266ddade56e74335ae8dc1e553413f6d55c2074eacc6bf235d7e496e4ada874cf739144a36f96e4cce0a265ad7bbde4958f93c8328340eac6f97949a2a4636"}]}}]}}, {{0x9, 0x4, 0x59, 0x3, 0x9, 0x20, 0x94, 0x8b, 0x9, [@hid_hid={0x9, 0x21, 0xfffc, 0x7f, 0x1, {0x22, 0x7ad}}], [{{0x9, 0x5, 0xf, 0x4, 0x200, 0xb0, 0x8, 0x6, [@generic={0xd1, 0x21, "1c8b53e60e158ca9222e93e3658a33771224281fcfce871c63e1ec316718eb2773e37b373f6b499c1e1f673d4a5cb97050ec999740d09cd703944767f306c5e19ee714262562e854a79c62eac1a49b8ef012d3d413a1a56960d3f655051e6bf1d8bee03b40fa60504962601c588bd73938147197dd20c9232bd780eb6a77d463141820deed7599f3b47162d295a6eecdbabfcb688b381f68b05efa0882665cdfe09eb24396dc2183a9e1684bbdedc5f12de18548f33b047ae8b2f7ddce1ffcdd98f66bf4dc1aa2597ef30205a322c6"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x7, 0x7f, 0xec, [@generic={0xdd, 0x4, "ec7c0f4138aa0eff9c54d03f7f682599cb1ec1fc7a46c2cedd25ffe8634e232c1b07ee1f9bbc2e315969a49cb3827a13d7d0b0a7743315de0d49957d19f3bfc835369ecb234bb74e4c7d5952a27846dc98873b1e954b6aac9ac5906ed9b438df1bb30206d0da0fd2776580467817bd9eb57035c21fa0797813a42900aa2142c30c406a148a30f2f97685d6f4a5537b3a5b9556970325c1572c24956f10be62b40a5af6017c8a199927466fa23bb79aafffa960e41b3e476a5d834a814211807c8645726d7ed7ded7c560a57952958e9be869a7084797018d0df1cf"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x50, 0x8, [@generic={0x17, 0x8, "94367e177626db25be471642a9b0174a7107dc3a85"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0x6, 0x1f}}, {{0x9, 0x5, 0x5, 0x2, 0x0, 0x8, 0x81, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x7, 0x8, 0x7f}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x3f, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x670, 0x5, 0x40, 0x2, [@generic={0x3c, 0x25, "9504bbbe0d2b9f2307a8714ebb6225f683fff4891bd987bc7a4ae40b3e0079e1751b4fb6e26682126fe1f73e8aa272f390c935a4b24a1be6cb77"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0xa, 0x1, [@generic={0xa4, 0x1, "a4517b177a65c38dbb95e00ccc5169859d4a9d09919578572b3fc0d9edbb44c90f7cc5a01b5ce9f068e2a29a8c68f089394022905a76abb23ed19a40169aea81733954ffdea11680f7cbf4173536e0a3b6c1e57b5288da790e720af5b6866786821270cd53c1695ead8ebcd2f39d0d0a80925b737b13744595c05663b2bddd6c1d0ea804017e1230fd2fc0b703259de5cf7891d2adba471e57edb83417988a369623"}, @generic={0x27, 0x24, "328a854f65d9ea9180264504641ff147dd6a7206f4993ca43777008539fc89575f9a511045"}]}}]}}, {{0x9, 0x4, 0x81, 0x0, 0x2, 0xaf, 0x37, 0x9c, 0xf8, [@generic={0x9d, 0x22, "8e9055387b0046b732803889dfdc6add8771bbea39dd11264f36f59afb288d2553a5d1decad50a3847df684fe5aad568d10b7afab26088e89c1370782e50dd8e9ad4f0d8245fc3210395031bfb264a2f1344cfc245f7d7753aae091875aa70bf7858130aed3ce26f80b6c0ce465b1b73b6f598a82cea95abd79abaafd5e8b79ff32591e8157fac80fdff00b1ae550bb1431ae9ca58d8399baa96d8"}, @generic={0xef, 0x22, "e3059eb3fdcd5d2313e4e3aabad85c16aa1a4d89bc5305ee8124ebaa24dde2f7a4d60dacc3f22b9613d858840e15b33757320f8a7f1da06ede2a55d705d5db8187a2b623581ffee2a948c66ede8c4f610eb260eb17ee0ec66e20d9c4a2f15d6e867a9e15fcbc1bbe7eec55350721ff7c7e58e5479b7fbf163d459eea967daa79635c8798734c46b9f48e844466ac0f1f1cc3d5130ab22855849f9c8d3bebe47a5bf2f1eb2a5b90a439add20327a981a067947b90e7743b663155420c1a9d6c0f902389e7668c64c9f8355fff890c63458c9bf49587c0fccd3a340ae8d709960164fa966f32f575a44c454e40e3"}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @generic={0x44, 0x30, "f03f7d38814009ff65b896e7d8ae2a3e942ed663f8ead541b6329dd1852af43f1a0a117814e9f19e9b6dc52c3f33447f234066c802e3285bf66c0e4c0664334f46bb"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x0, 0x3, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xe05a}]}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7f, 0x0, 0x8, 0x20, 0x8}, 0x3a, &(0x7f0000000080)={0x5, 0xf, 0x3a, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x68, 0x7f, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5ae804da49e9e3f7, 0x4, 0x80, 0x9da}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "de032ddac4a0ea7262689c6f482dbd0f"}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x202c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x860}}, {0x42, &(0x7f0000000140)=@string={0x42, 0x3, "055fd38dd4fe884f6892cbc8c7d7b63c1514e04c9dd954aabb11583cddd29ade11b118af94b75ee3b7a28ea941d3fa2d0680e9a60d1c1e1a5cd1182075d92330"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x448}}, {0x28, &(0x7f0000000e80)=@string={0x28, 0x3, "d7bc645e857312b5226d91347d1201af76b2827eea0ae5f7559e3e05bdb3d006a7fc7d56768d"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5a4, 0x1700, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0x90, 0xc0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x35, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xa88}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x20, 0xff}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x20, 0x2, 0x8, 0x8}, 0x108, &(0x7f0000001080)={0x5, 0xf, 0x108, 0x5, [@ptm_cap={0x3}, @generic={0xeb, 0x10, 0xa, "2737c6ce1009d5de55617755b45923834dab18d3b0f5ba97592038698b9767deaa78eb0cf7e6a11ae2b09adb3fc01a374bcfc1e1a3b369da2bb4a3d332f953f22704f1dbc07f3a10f055ca31e73d0dbf270f6c410ea19c2337444be92f6399d52a5ea4f84ce023a81eb6f231028516749ffad131b89d4cfe3ef3fee3ffbe1d106100338b0dcb01affede803099a54f96a59210be4d49e85e162d21018bfb414c47f2b5b2ef012b52205081455b4d97ff85dcc3c4e4bc3369367d07df0dea88fb6ad9e604c19c7865fac41542c8c7e11b18ec9392feac02a0ea614f460bb912dea74cc36bd6c0ba98"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x87, 0x0, 0x0, 0x5, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x4}]}, 0x6, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x457}}, {0x102, &(0x7f0000001240)=@string={0x102, 0x3, "e4ae22b72fc2fc38b4946ad649a30c9eb43d917a8b4463388a91dd0a94b5ad32aebaad4091dafcd84e05576991402fe21b32d25464843f37bf88ee0deb8b36615dab6696bad4d85fc2370229754f7184b4378856e336489c22057bd0e067a82f0963418ff96307b294e8a0557b1b43f0c209f8d4ae88737fa1e8dbc4f1f89f8f4fda9fc7f9c09a07a2b485b79ef32db34b9ced674785f06ca5d5de537fbf493006ab7a9361d72edc4f4f0acefef9d3b32fa9de274e300ac7f7a43b82144ef55ea95544e83d526f222946f3000cdce5230df66864b76548d1a65f6cda65e96d8c82ca55aba586f33224e1ff5d6f554169c96926759ed29c11e35c4a2662d70640"}}, {0x59, &(0x7f0000001380)=@string={0x59, 0x3, "bcb8d2c93f4a60779870dfdeb44f350ffbd5e5a7131309d175055af49ac2622ad7cbd7f8802305425b84bd3b849902a10930b1317189a515aa13dfd8d5c92b759ceecbce26679986d7982e47fec6494655af1820dd6e4d"}}, {0xe1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_ep_read(r1, 0x81, 0xc9, &(0x7f0000001a80)=""/201) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001980)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5}, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001640)='/dev/null\x00', 0x8400, 0x0) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f0000001700)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001cc0)={0x1244, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x81, 0x45, "38d4ed08ba7e4045a5ae788482565caefca0f13194049dc15d180d9cbae0a5ffc483fa6570316b29a97e04ff5f3094b203329fcf740b6f4f01f2566b4c11912dae5b64de0ed4b8f1a6c3c03397678b19d36053af8a349652ecf9ae788a43928421214977c8dd71e3bf0b8a217e92a196c3fd2bfa7b95ca6bdca1dc7f2f"}, @NL80211_ATTR_TESTDATA={0x80, 0x45, "9dc3bfc6d27646cf74de3cfc8960ce64535e39154c9e6ee0f6e4b753882b009d02d51428ecdc6e7009a4b0bb11a62fb2c3e220a3390c61803f6988de69b3527925d653f2feb2a80f8db6225514bf869eda2cc9878bc6f9738ba3ba5c4a23612ede3c10529616146b1d34306dc900e5f53a82e3103931d59d4a905e3c"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "bde8fb1cdd93dfca00d82e7e308a0f4ff1515cab80f8e8e3f758b9d4bc12ca6b8987bb9fdec7f424893d2e268d8f339c064732543279ad40b8c5b07ac8bb67f38b0762a3e111971bc62343d3f8753c47d4a820ccea928fde5bcf0391f53dd1929e1948fb8461e7bebfe354ddbd9d4b9ba260fba82c595ac12e055470d99f5a77a8728a5fddc8a53751c9cc65e5c2fe55036565c5dc5de762d9555a7c56957e6358de8612d932726634511bcf4d43d4b7e8b09a1cdead6364"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "5d8c5f0b655f4374901f8a5a449d4e962334d8cc7fd1ddb3ec37cb6d65b19f83c4924086bca928464f3192173678335de5228c242e47bb617cfeccce31785d2e09c099bf248e6324217fdf65f0d5a8a8e345c78397eedddc298ee9193ff73150beed2a0c963bbcb391a4bb0217ef44327c189dc6d6f9bb828fc175408b38f372092ee515caab0486c8d8da8d7247e71bc5ac316118aa1b0cf7c7de435b18c00030bb871a4ecf446f14e63a09cba48226d1d63060776108211bc764bea8d8d7220d7d06cc0a7aad2bb98b55e1098710a91365e6f7747db64915b6c87e7727c9c4d0d20df50c288510f54fedf328bacf0620b2f9aaca7fc051bcb6f8b9733c19c50bb229cb6fa5a6002cf506cb325706707ff256cae8073cc2a4dcab214b9419ec5ae2fbab42c6a15192293455ce3316f3e1fea88d252a891f2b07851a4336163632fa4a79019db8c4062db9dd75612b20112963d2cc850ea28ea95e4918434fce7f3737c5353ffd6a924ce4fed9c6950b7d8875b6d28faf47574b000525781e236e8d6a33dceb65d8b7bf2f3e41712d2ef4ed3e1f479f484e16271597c6c886a0d382952d7df53efbd7f8a00dc28ba2d04f220de4c5cec72d520c3ef4de88b74c925b5debff5528fd46a50592e535670bbe14c439203df35a6b7150055bd143789c9f6c499b568f4e64dbd90b52709d060ba57b2ec1f6ba15ef511ef1841ef8a098bfcc42a54fe0a8107b9a4d9630da6561ad1224749bff01c15bfb5b3c0cf660e82865e02ac5cfe1f9f5a67786305617425d4860701f2389b46c7e8ed125c9955639dc2ea0fe5cfc855f59a0ea917aebee1aaae595df4b1b293b9c13b8eb6588ac7035c9310ffa9ec11904a2e766da72035704b79712f3eaa25eba49af79495a9ebd0f3160fbd6ff79e963377e59d60345fbb1997b974ce1d6838e61b69ea036ee8dac62adabc369cef58c066c6f716ae69a052d1b5bd26789c112df04f3dc61bd7a2ea420828259d10d0e56e423ba33652f2134e5bad8b7bebbe591cbd8a77039a42a8fe525c3bc3346fec34c43ec0825cd0084f3b6638715421e35231271cec293bfc9fd0566cffb2a5aea960744ca77c92044a3ae71fc70743a42256d52e7e267791d9f21c7b88d163c04e24db50ac6ce1fda5ee00ee498c1741e9e50f427ea4f525489f53019d8a25fa648a12be94850e4a7ae605019b37d18ccdc0356859d17e61a8a3cdf77112f07cf6bbe5ce57a033b1dd06ed19e7a6c3a4f3700533454fe03467d38648514d6b4887cc66c2a58464b345be91a0106fe04a66e958f09fd8f75b237335c520e906003c2e1bfb160525f78e8bc4d52132c3fa449bc3ef0a21d603a6d19c565b36ebfeba59afe59ea33310134cfc9d9a5d21334cf024629c0d062fe1f4a939077eefa2603f8079c5e78c4722e2d73d9e348ddc58cd3e3c08bbbfa7e7a31b13a7fb54fe0c0c6e3c1f0d0778598c532b8dc3a1e38724d53d625d4b51f99ccabb7a1750720788c7911fba7a19a5a927c322ade1c98d625c651a93218ba30ed2f73c072cdc68e3c5700cc657e134b440a1f6af794e3c44142c4a914928af68f0861944dcaaffcb669b733b03c5ab68a3ea0d30c8a44db611e440de0e466e3a04fcb9421e4c0808e1895919d5f7366a0c118f2926486ad455bc2643575eb33b8e6a0615f9eef37e8807d24a8750b92834e858eaaa418ef28696b22961c9187e25a0f6b18cf260b242e4248a6d5f74d600468c46eb76f64eff49d17f96491fd0ace42c30809928da5058b25726ade956b2c6a13054fb0c4a32ff5290bda711df29741cf6f4f4a35fd3dca5b90e816d94d993bfc919554d39c28a13b1f7497071a1e04c6ea91025c2d80b90647089ada72846a738607d3f920fdb2b5263686bf1e4eaf7829a168dbc22eeb1eaab70b71937444b6dea7f0d9ff0a19938c2f7c19b1130649c4e22aea090bb98dc9583638688b78d6cf90ef1d4f9e4b1faccddb7b7d42cbb60f106d91906be4132dba4247f285e88c093f831175b502e5e4f1e86996ba9abb5139ad27d92fa31349dc234c84d1991d7a2b7bf38e6d1e940ac2ff4871fa5fb596790fd74b0ee46f5db3ec005981d57ca56706275e5883404bed522fb1e6183e78f63435d11a4de3622dc07b170cd541c8ae77271daf031b9a25a112f2be3afb74091292845590488983c32e6a44ab6e0f14980673eedfe8bbcb55309fb24da9bb7d3aeed2f613d46c20a867d1f4c3d7da1f6004a2574189694528e56e02fc586dad0acb00bc5b2a7a9865b433f732f856ef2d3bbf82b9a71929323d23cef3fa06bf68b7bcc0fae90b12c7414c69ef4167fd54773ee0318e42e9f203e4202deedeef087c96609af3c147286ef7af6da9d2a7e69258e115172be8eb2f7666455b59cfcdbf6876826863f83c2c74b624924f35feee6a9dd9b7a5d3d2b255e566e6e82928325c46a0ced06478898612cd6c3fda5471f6901cc553c3978d4f2416f66066e89440f4ea20a0bf53f3f1cad8aba3fea47991937e82584e607861b86e35dfb7e660a89ad3ac90a6b72460774ce59f8df93afcef7726641b0ba5887aafc33d3520bd35b53685bdb219b6340776bb612be12ae26f0d0c38fe1db33614b8cce16cad060a2e7cb4f447db9311d81602a81e72adfbf6e56605ecb5574c74c6a247a1242b7989dd4a8f30037fd75eca858f5a9205e05dfc1a5da31ae2605030dad26a5982f8f7e67897dcc365874e93b4f6b1e828794816c02a470646bca728974b3b83a9c14400c0cf37597ea3ba1c24034aa9cdc981090e98df11ed407bffe974791f08fa232aa210dc0c3b3ecebc3577d84678d0a8654d9cace0f6cc52c9dd7dac6ce5dddba34980960b891338b11f35e3775e4a42d9cf128829eaad8c852ae450267da934a7c85e7c9ae44afbd5e8615bab74cdc62fdd6f90ee291fc02de25faf654449e15fd4d9511b65275df6542b445d7f15b9f682720fe2ca9d4c46efb29561b24430536f3af87935bf0c55807a5994cab50e4a17d99659cd514bd48b0bbab1f6028b3e6eeac81a209bf7e3d6b7e0a7971958719916e560a33125088602ca4865fcf331693b060bebd624270afa336ffcd93a8150bebfc1326783a60061007de8e4d47390588ffb393def9f7f867877422c7aeb1aea01747c4d97b522e36b02668ec46b15215f215e5730bc67e7c9f15ee92bb16d8c03dff05b6bbc9a257f54dcd86a9c2694c41ad8a63afb9c85633fc4c6f2f2ce316bc681ef58930bef03a3e0d4ccab3cc74eb59ea0d21ed45fe33f901b82ec4c9b312fefcab1e2be11898d07ba6e950042e81a743bed2d6cbdb3205bd565a7b39871de6b8a3d5456bb14d99d7300d99642c602d49576f7e9ee560ff246c3b3acbd9b71dbed2d41353860b93c6588badabd90bbba459e31741904f5ade67ab1a289f56ea29a4bbb210bd79ddd4d50dd2f4c2f9c94aba8e069b1e4f42bd50900696759b941ff8ef00976a739792a56ee75979952d30a7e854f1fd4ae78deca3a787d0de748ae0491e720aaa4f0cc0ac57b4aed804cda171c447d7671e3c38adec9b83b4282af870b8ed1414be956d0a4494a5068673eee1fb34c0da8cd25ef2bc66e9b0ad77fced147d7080d0008c6b3c2058bea6a3c0c7c965698d16c62dddb431cd93cf519a0bc924e7feb39b44625fd29a76c6dbd86e6599658015eaf20bb31ac23dee7c705cbaa192a98fd3678af2749a3faf1a33b5c8a3a337223e04ccfeb1f6cb0b0601aa0dc3a14d4b827ed8b11295880bbd6c316a290e3d486039566296bacbada7b728190237e493e8f454e8bf4a55b950090a0e6656956b39643d3503e2efa3ae1f19793ff1396385b28793a62e08e794e550f6a620b71ef88746dc70bf167a41ede0a9109d0cab1041d392541972d823f92da48c8c841bd483ea3db60aa90b271e39e1e0fc5db6dd6f5f319cfc32619a6d79105c1403e2424d82062080c82d0ebe5ef81b3c9f68ca2988083566ad548c61f4d57bf4f4b397bf4e09dc37a073801f12e600258fe5f31cdf2fca33e379325d507a35b3fddd46566b3b1000998c7d97a210cd8eb35dac84b4750f5c7fb8421c2a1510e59ef5ff02947e1930f25ea4a36474b8ddd1346ef8b89963ad40a51827fef00bf7aa5f03a133a264358474a6cb882272c1dea8ff59895a8118621f6c8a8df3e4444d91ea436f8e7fcd310e5d254e75bfa3e07c9b370da151641038fb0d8db85e90e05ddfb0fd537d5d3bb7ca78f8a48cb1b48d778424f2b58c6acac4250522396ff7eb12bb6c0c31ab039c7cdfbb3e61f65a58f0d266def0bfd3f3c5a514c4f0203f0b077d65f5b73890526a896e008acfbba687a124db8fc5bdf8d4e70340e566242d557dd11fd913db2844d58076e01633f1743416f2b8b44c6e2501e35abd6743bc2ea1096ab37e5c0e61a3063d9e5a72834a409affd026870d7b6f92d6e1a80b85acaf412b5ec009e7b52f309795a1b59f826a4eb4d6c7e7961f6c7cd9de45f4a7523cacfa67076ca23f13e113d7fabb45936601064ceb0c605d1531218802d7b9aafb1c942cbef6de8fb9452f969dc421097545d428bf7c4b3212fdf218e6d62e716825bf982c7f163aa51b51699bec72ccb8620fe8f558f9240bd311a2ba0a24b6cde6cbbd713a1271fc3e076a2e03e0df77a42b46876453a586de2185076183cd2e077ab1e0637202df1e54c62993c4cd9f011c13b0103537bb70142131eea42dde8da59a963fffe6b58023ede211447f390025394bfc0f21628a0cf3643218856e71cd0d61cf737c5ee3d4571b1e212b8de2a666e5efe66bdac36251923cc4c0cc56bb70984385bbca57be138100d5bf34b776820c248649ba04ac9c8a555d5ec0642afc774b67b522527cff6e3be7b4216c772e4a809f0f9f8e26d7c5d8019bfe911106d67789f80f35feb04b50844e6f601bf09c7748eab9ce56052583c3239de35f151b0e20fea687b6dffa1b351739f1996ce8c1873e29a5275903fae014006ad6456d7a0fc4bc2e55e38162f97e401877e41f8096ad0fe0224ba7cffe243f0623e87785b188f3fc9dd57573fccacadf68ded2195e8f90976cf5a6877385baf27e795f77eaae20500cd5d5bf562852d1433205610424ebe7c993d5cd23ffdb3531d03ce878eedc90ec035dbd22fafc3d728cd15585189123d4048626259e917399df07385a7fd9db5e220d48c465f5a7d6812e91187ccf1b4d1447ae66538054909a6d24695bca20e4c2d08bd99165b32cdf38d56069988d1fe4432a6a88cd9c1ff57a48e24215cd2c714a59224236ee71379dd3e2e98ad617a6cbc10d238f8aceebfa842c781b5153f7cac5062d7252ba26fcb12d8d7b8065fcc4a17d71c4246890c99b009b2f4d8d1204599e462506a7c141cdc724f5ddb668bb4b1df48ad44536eaee104fe23f76b01fd8c9637a132ee364c2c7d476e61574ab93e564e08a77855de85403aaf1f108d219543be7cadb63d2489bf6814202b6dffa76241f2e8eb46c27e2f062e351e797b6ac9ba3f68bc934908dffbd0e25f364d18a50f266ff52e053686436e5ea0da85af3b49fbd9759ff3c7005fffe0c9010a16692f39b427cb12e77ddfcf2f93f258c2d9f53a58dec866c55cbe5d7245904f911380332b08e9ebc51cf4d6cd42af26455e86b63f305d560b4cd15782ebebe0f29ee98e26f198b139fad4138f998b7917031eb061ccb0070cde68cc7edde4d1813c6919d4f317264664fefe87fc438ac659ede3b42a311689a9029462542fa05e59ce7361"}, @NL80211_ATTR_TESTDATA={0x69, 0x45, "af48df1b94f997d54a6d4e1ae23d8ca1e3834ac33d2fc6756d92849e195c17e5c3db61f9fd0bb1f6689e75056d5168da8c24b0503c23d5496ce1048edd20d5824e7259429d968b64c87029e44f2c4e2e0952f09a795eadb91c7eef34ef62971fc5ad3ab676"}]}, 0x1244}, 0x1, 0x0, 0x0, 0xc891}, 0x20004000) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x50, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200, 0x1a}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r9, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48081) [ 1258.395604][T22520] debugfs: Directory '22520-4' with parent 'kvm' already present! [ 1258.406760][T10115] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1258.428789][T22534] fuse: Bad value for 'blksize' 11:11:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1100000000000000}}]}}) 11:11:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x4000, 0x0) 11:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x3) [ 1258.476765][T10115] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1258.485163][T10115] usb 6-1: can't read configurations, error -71 [ 1258.506704][T10115] usb usb6-port1: attempt power cycle 11:11:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1258.541383][T22554] fuse: Bad value for 'blksize' 11:11:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200000000000000}}]}}) [ 1258.610335][T22560] debugfs: Directory '22560-4' with parent 'kvm' already present! 11:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1258.658602][T22577] fuse: Bad value for 'blksize' 11:11:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="66c0293c670fc75b35363e740564660fc736ae5a819300100200f00fb3000f41e20f01c3360f00d166b9310800000f32", 0x30}], 0x1, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7a11}, &(0x7f00000001c0)=0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2000000000000000}}]}}) [ 1258.725612][T22584] debugfs: Directory '22584-4' with parent 'kvm' already present! [ 1258.748611][T22597] fuse: Bad value for 'blksize' 11:11:43 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x5) 11:11:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2010000000000000}}]}}) [ 1259.231344][T22614] fuse: Bad value for 'blksize' [ 1259.236698][T10115] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1259.276928][T22619] debugfs: Directory '22619-4' with parent 'kvm' already present! [ 1259.496702][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1259.507628][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.518638][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.528413][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1259.541473][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1259.550646][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.562808][T10115] usb 6-1: config 0 descriptor?? [ 1260.028102][T22547] udc-core: couldn't find an available UDC or it's busy [ 1260.035067][T22547] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.045090][T22547] udc-core: couldn't find an available UDC or it's busy [ 1260.052163][T22547] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.136707][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1260.142643][T10115] usbhid: probe of 6-1:0.0 failed with error -71 [ 1260.150859][T10115] usb 6-1: USB disconnect, device number 25 [ 1260.836604][ T8585] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1261.197019][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1261.208076][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.219808][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.229845][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1261.243349][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1261.252974][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.262510][ T8585] usb 6-1: config 0 descriptor?? 11:11:45 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9801ccd7d9a2af4cdc21c9350000", @ANYRES16=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4050}, 0xc0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x10) write$binfmt_misc(r3, &(0x7f00000013c0)={'syz1', "7480f5190a7cba6d5779cd6522716b8852a8891d9127cca645bd17d0c48d772ad0f1706a525388cb910c6e7a7ee4d3475306deb6168267f2f4dc031d77f952a43fa91a133eb2a7e79270"}, 0x4e) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) 11:11:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setparam(0x0, &(0x7f00000000c0)=0xff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2500000000000000}}]}}) 11:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x6) 11:11:45 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="664fe0264907eaec8399b113943b08543e1593468e244197f37493a616bb00e713ccbc1a09d099dc5934edc7a9ce869775659ff9d40b0c9fe9f065455e3f698108c74c3c1c8efd3628febd0d6a655da13b75e779552fec03000000c157c8c584c1ab36e34d7542ccc58276727500d1"], 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x1, 0x3f, 0xb, 0x17}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x3f, 0x3, 0x5, 0x1, 0x3, 0x7fff, 0x5}) [ 1261.510600][T22664] fuse: Bad value for 'blksize' 11:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x7) 11:11:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4800000000000000}}]}}) [ 1261.566573][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1261.575550][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 11:11:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x4c00000000000000}}]}}) [ 1261.630800][ T8585] usb 6-1: USB disconnect, device number 26 [ 1261.650140][T22683] fuse: Bad value for 'blksize' [ 1261.670680][T22685] debugfs: Directory '22685-4' with parent 'kvm' already present! 11:11:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x5c00000000000000}}]}}) [ 1261.691845][T22695] fuse: Bad value for 'blksize' 11:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x8) 11:11:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6000000000000000}}]}}) [ 1261.770821][T22704] fuse: Bad value for 'blksize' [ 1261.779286][T22703] debugfs: Directory '22703-4' with parent 'kvm' already present! [ 1261.851678][T22716] fuse: Bad value for 'blksize' [ 1261.986477][ T8585] usb 6-1: new high-speed USB device number 27 using dummy_hcd 11:11:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x9) [ 1262.346843][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1262.362272][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.380027][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.391169][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1262.408668][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1262.418813][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:11:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xa) 11:11:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6800000000000000}}]}}) 11:11:46 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x91, 0x5}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1262.444711][ T8585] usb 6-1: config 0 descriptor?? [ 1262.502011][T22749] fuse: Bad value for 'blksize' [ 1262.520246][T22750] debugfs: Directory '22750-4' with parent 'kvm' already present! [ 1262.986377][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1262.992532][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 [ 1263.007169][ T8585] usb 6-1: USB disconnect, device number 27 [ 1263.686377][ T8585] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1264.046343][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1264.057213][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.069030][ T8585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.079195][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1264.092732][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1264.102194][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.112568][ T8585] usb 6-1: config 0 descriptor?? 11:11:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x251, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0x22, 0xfa, {0xfa, 0x9, "63e91c35378f17e8b29b672540dbd88806f2bb47aa0524546ea263bd2e6bd4c607b831a645c7a9db46bd3287c27dd65f14d43f986a7b09035322859b999a43e29dae12b3c333012fbf54ec3c6261fb0c32650e86068d9e8f6df818384fe7c9f02f8785652cf3a5851d59421b85bfdef2e02a53f3ebffc8baac781245cdab000171d135955b7570ddab907ffc2b77f643a2688bbf8eaf51aceff38e5d0dfa16942b8649c5721191ec38f63503fdef4c124bb535bf1f9df9b6507bbe45756ddcfb9ceacc3012c692c1ac10b2d37acf5313c4cd4457bb5629735f5221c823c576bc2a7cd0c92f4870f752dce0ec3610f75880707ce18f319aaf"}}, &(0x7f0000000000)={0x0, 0x3, 0x37, @string={0x37, 0x3, "87a274fd56dfaf9da4c140124878a695a6b268805fb63835f570a2a14bbd07f9ed4a8595a7289c1e03ca4649657ece7aa6a3776d3a"}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x60, 0x0, 0x8, 0xfd, "1bdebdb7", "a1d2bd0f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x7, 0x5, 0x20, 0xbc16, 0xb35}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x17, 0x65, "3a244208c4aa28018b2bdd93a34cb94580c7dc7fc1bfad565920328768f3fc07ce22a1ca6f392ab870d055b9fefc50390cda0f82dd347d2c075f14f1b7332ceec30be881141b97d31e5a8731d15d0a5d1cc9559092c7ce2dcb9245aef9d00b74faba7452d0"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xc0, 0x80, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xffed}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x93}, &(0x7f0000000500)={0x40, 0xb, 0x2, "03fd"}, &(0x7f0000000540)={0x40, 0xf, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'TO'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xb) 11:11:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x6c00000000000000}}]}}) 11:11:48 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:48 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) bind$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x8, 0x8000, 0x2, 0x0, 0x20, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vcsa\x00', 0x400, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000001440)={0x18, 0x1, 0x0, {0xe8}}, 0x18) write(r1, &(0x7f0000000340), 0x41395527) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000000)={0x8, 0x48, [], 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xa0480, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000008700)={r1}) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000008800)={&(0x7f0000008740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000087c0)={&(0x7f0000008780)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008454}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x201, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380)='/dev/net/tun\x00', 0x200, 0x0) sendfile(r6, r7, &(0x7f00000013c0)=0x2, 0x40) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r9, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000001340)=0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r8, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r8, 0x600, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x80) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1264.440372][T22800] fuse: Bad value for 'blksize' 11:11:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7400000000000000}}]}}) [ 1264.476295][ T8585] usbhid 6-1:0.0: can't add hid device: -71 [ 1264.482690][ T8585] usbhid: probe of 6-1:0.0 failed with error -71 [ 1264.498582][ T8585] usb 6-1: USB disconnect, device number 28 11:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xc) [ 1264.543906][T22825] fuse: Bad value for 'blksize' 11:11:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x7a00000000000000}}]}}) 11:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xd) [ 1264.641951][T22834] debugfs: Directory '22834-4' with parent 'kvm' already present! [ 1264.664009][T22842] fuse: Bad value for 'blksize' 11:11:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8cffffff00000000}}]}}) 11:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xe) [ 1264.712925][T22848] debugfs: Directory '22848-4' with parent 'kvm' already present! [ 1264.775778][T22859] fuse: Bad value for 'blksize' [ 1264.804886][T22862] debugfs: Directory '22862-4' with parent 'kvm' already present! [ 1264.867700][ T8585] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1265.226311][ T8585] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1265.302535][ T8585] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1265.328463][ T8585] usb 6-1: can't read configurations, error -71 [ 1266.016190][ T8585] usb 6-1: new high-speed USB device number 30 using dummy_hcd 11:11:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355220540000000000109022400010000000009040000fd03ae02ef26499c50c21c010000e92000000001220100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bf80cab306adcc2dcbc88d05889800099c"], 0x0}, 0x0) 11:11:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf6ffffff00000000}}]}}) 11:11:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xf) 11:11:50 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:50 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3, 0x0, 0x0) splice(r1, &(0x7f0000000000)=0x5, r2, &(0x7f0000000040)=0x1, 0xff, 0x4) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:50 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000405471bbd10a0db62ae5b33cfd31b1dddd166c8158569e060c12b373bae42bd956fcd3b4693d7af7d002c6ef4d2eee82f5e5e86e1b8276185d131b9b111cfac6408d16f5bf28108dd4e0350fac57f9b8d37b38bfcd62", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf250200000014000200766c616e30000000000000000000000005003e000100000008000b010600000005003d008100000008000b01270c0000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000400)="9311bd4a339194107a9770498e8187f05b6df4fd2b737c67f990", 0x1a, r4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0xfffffffffffffffc, 0x9], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x0, 0xff, 0x5}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x321200, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:11:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf9fdffff00000000}}]}}) 11:11:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x10) [ 1266.364588][T22901] debugfs: Directory '22901-4' with parent 'kvm' already present! [ 1266.393021][T22912] fuse: Bad value for 'blksize' [ 1266.396269][ T8585] usb 6-1: unable to get BOS descriptor or descriptor too short 11:11:50 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000140)={{0x0, @addr=0x100}, 0x8, 0xace, 0x2}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={{0x1, 0x0, @identifier="2ef77244e58ca6775c9555decc31ca59"}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x11) [ 1266.456207][ T8585] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1266.469422][ T8585] usb 6-1: can't read configurations, error -71 [ 1266.471819][T22930] fuse: Bad value for 'blksize' [ 1266.483746][ T8585] usb usb6-port1: attempt power cycle 11:11:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xfeffffff00000000}}]}}) 11:11:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x12) [ 1266.569846][T22945] debugfs: Directory '22945-4' with parent 'kvm' already present! [ 1266.601206][T22955] fuse: Bad value for 'blksize' [ 1266.669089][T22960] debugfs: Directory '22960-4' with parent 'kvm' already present! [ 1267.196090][ T8585] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1267.406420][ T8585] usb 6-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 1267.416643][ T8585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1267.428207][ T8585] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1267.442130][ T8585] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1267.451690][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.460713][ T8585] usb 6-1: config 0 descriptor?? [ 1267.776028][ T8585] usb 6-1: string descriptor 0 read error: -71 [ 1267.784564][ T8585] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1267.793009][ T8585] usb 6-1: USB disconnect, device number 31 [ 1268.515951][T14845] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1268.895962][T14845] usb 6-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 1268.906161][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1268.917730][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1268.931116][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1268.940445][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.950189][T14845] usb 6-1: config 0 descriptor?? 11:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x25) 11:11:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xff00000000000000}}]}}) 11:11:53 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}, {0xffffffffffffffff, 0x4000}], 0x6, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:53 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x201, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r3]) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x201, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001b00)=""/238, 0xee}], 0x1, 0x0, 0x0) r7 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r7]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)={0x25c, 0x21, 0x800, 0x70bd2c, 0x0, "", [@nested={0x24b, 0x84, 0x0, 0x1, [@generic="6e74a7e70f43b925600a4288802516e2e4df74b85b39f3a8dfc231402371e04d785112c3d431870bc57cde63d5e65a6dc2b575e6e6422a", @typed={0x8, 0x60, 0x0, 0x0, @pid}, @generic="6de842077ad1550694a41326e20e127d4bd229c3941bc796b2d9a4c102129d", @typed={0x8, 0x7, 0x0, 0x0, @fd}, @typed={0x54, 0x8c, 0x0, 0x0, @binary="95aaf6ef385e9e27084fd2cdf9eb251b8902a672d1936721708f2643d650254879d705c3964c54d3e8aa39337dc9584e4a4a8c7af7c065696bc2046b03cd3b2b84b7c805587b1219fa6dac65aa8b18ec"}, @typed={0x8, 0x17, 0x0, 0x0, @u32}, @generic="90f7d6bc64a4f3099f114e752e46b5ddcadade", @generic="6a675a48332aea0bd3fce9f21fae472a08598a111bccb918b476af1ff79d8cad82fccd469b4093effacfeceba4ac511c342c408d20f2682d024776d7d4e91594236e51c49e4ec98ccfdbaeeabba88e6a495a7120f275e1f6d441f60dace8e6bfdecc3dfed5ece48d36652c3606a0f44a2c05fcb2d171bdfb81fba292a842c8a7a307df3a3cee4517ddb881c9ebf467f7051a2dbdf37ebd98578753c37515c929c4325104a10fbc56cd6e51788cea5d4ee3a165242bd6c6db8bd26ae045086781e56ea4ab4d115333a1d20f49988f1299686236f5efccc0c25fe9e752779e4e0fd779ed42d3257cea", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="cd71db9704b732c7fc2680ee1205d4757c7072942236b1fe6671e85e06e13f0fed9552ab5b19ac6c9d3e991ddd5d43a636e77bd940293802412b17346d6e74a83582f8ef37a04fa9234d752ea3b22ff69b1fb109053c9e22203541afb171a80918a24649b5c9dd8b6acc95a45433a72f9edd6a5ed9b799ce857175c86ed9e8f63af3"]}]}, 0x25c}, {&(0x7f00000015c0)={0x53c, 0x28, 0x20, 0x70bd28, 0x25dfdbfb, "", [@nested={0x4, 0x2e}, @generic="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", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xd, 0x0, 0x0, @uid}, @nested={0x57, 0x1c, 0x0, 0x1, [@generic="9d47c8632c371a91470c6f418c63daf00c2284aa602f282ba75b69e52c5f0c896df777580448321a374e81fc2424f0364e5ac84117882c9a5d0d1df47d98e1", @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x77, 0x0, 0x0, @uid}]}, @nested={0x185, 0x73, 0x0, 0x1, [@generic="8af3e6977e2763e3f56715fcc6a465083595a75cd0b8784f1c03cbdd5a89eb5415083c8678868ec1b8f7f97a471d6bd0256bfd583da8262ec2bc49307b72448afe7bf12e4055620b9c7119ada215a94119d8c50a81fa72d338e6fb5692d67cb88ba5c34035d6105bba760dba445052db34931cdf7a043519733d85653eb1eb0d31e7167abab7958d0ef18fdfb1f5ea64dae3ea433399dbc598ab7ec89d61aa36a43dfdcddeb47015540469a74bff6685d5a62a3fc55c88e605e41b10be36614616a095d6bc97c92d0fd2fdacea866c180a373f509f91", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @generic="ff96023403f1ccab22e145a89816e9758a7e4c345207e7f24d9699c8e38477b95ae5ced455098f39521c9a2afcb16d4a161f875efa508f19de2dc17b4793ad6a81c6c4705a81fa6e546dd4a01e83f784ef9887f1d6e1acbe1d92d51394e882ee0c858b14e631337a834a2ec3d49ca812495955950bc621432bd775fb1579caa717f3d2a364ed3d2fb9bdf8eb9c5bbbf1ba91d8c44b9503"]}, @nested={0x23c, 0x3d, 0x0, 0x1, [@generic="4c4faf03fb61218e4eff68106070d518cb49c9d6c0e9b94cb047995d198b6c45650db59ca6d697fea43a883ff087f097b0f3ea96d7827fdf7fc36d27bb53c9dc8247028abdf2c4c5a71715fe8b1d111994bd97c7817ddcf510bd8a408c880e9a1fdd5acfcd74", @generic="8eab2846a372758f55a69b2e04ca52f94611a132", @typed={0x4, 0x81}, @generic="2d8070a176626b143a9ae5742da55377e97050ba5b9eecce47da8e1d7f1a09b89f97698e930178451e9a322ab296c344db789d80efcef08a936dfe59cc3addae6746510d3e145a52c40cf53fc16b91d16a874c616d1d57e63242f633f79e81bf762983cfc5347215e249b27288d13e92b26eafe92a6f752610", @generic="9fbd3ee1be94390176524fcea36173acd18a82bbe1f30aef98aec4ceabba6d95ff86c3d83b8a6d274b99d7337b4ae3f96694aadb0045c5cb6a9f5f5a84f8869bf8d92f1a34320fbba5", @typed={0xf5, 0x1b, 0x0, 0x0, @binary="ca8aa7fca164671f28aa984fd83707d737808791740b71e3b0c9fec07d4a0d19c18fbb2c70d52e091855cef8a716f4c6d8b4c83b925a23e8dd7f95d7e36430fcbbff9a997ad8b6b30aa511df1e6cf3a8d607199d9e2843f47c6646719151820cd563c179ae362c1762bba8187f5f049daa37280e3748d2536744ee53cc2e21446de8ba62eb373ac6c89dda2b7d9ebbbc20eb49b50ddcb4b10550b409bba451207b2dcb96586fe3b86999d2e139645fb2ea51d00184fcbf58f7141dac815e85ee725c41df67c54beef8e0edbbc941dc51a4fe0dca80ebad288f76c2ad403964740107f5476513e8f5932435dcbbbdb129ae"}]}]}, 0x53c}], 0x2, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r1, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, r0, r1, r5, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7}}}], 0xb8, 0x4000}, 0x40003) close(r0) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0xd5, 0x7, 0x0, 0x0, 0x1, [0x100, 0xffffff57, 0xffffffff, 0x7989]}) 11:11:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)=""/252) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x64737664, 0x3, @discrete={0x1, 0x6}}) 11:11:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404355220540000000000109022400010000000009040000fd030100000921000000012201000905810300000000006f9007b1c9ea062dfcd401a1bf32e14f217620f0eddabb85d30b07ca22092540bd184217c3e6693a91b16515bb1c882c9a4392622f5876d9f08cbf37b7c9576ac329a891d86efc79184b00f9ea986e38a259562893"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x8001, 0x6, 0x2}) [ 1269.235948][T14845] usb 6-1: string descriptor 0 read error: -71 [ 1269.254000][T14845] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1269.280245][T23017] fuse: Bad value for 'blksize' 11:11:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0xaaaaaaaaaaaa935, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1269.287240][T23013] debugfs: Directory '23013-4' with parent 'kvm' already present! [ 1269.287575][T14845] usb 6-1: USB disconnect, device number 32 [ 1269.327506][T23017] fuse: Bad value for 'blksize' 11:11:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xffffff7f00000000}}]}}) 11:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x28) 11:11:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xffffffff00000000}}]}}) [ 1269.418049][T23053] fuse: Bad value for 'blksize' [ 1269.427302][T23053] fuse: Bad value for 'blksize' 11:11:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x5c) [ 1269.464368][T23063] fuse: Bad value for 'blksize' 11:11:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xffffffffffffff0f}}]}}) 11:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x104) [ 1269.537827][T23069] debugfs: Directory '23069-4' with parent 'kvm' already present! [ 1269.566687][T23077] fuse: Bad value for 'blksize' [ 1269.725891][T14845] usb 6-1: new high-speed USB device number 33 using dummy_hcd 11:11:54 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(0x0, 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_elf32(r2, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x94f) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1270.105893][T14845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1270.126529][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.139681][T23103] fuse: blksize only supported for fuseblk [ 1270.157829][T14845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.175949][T14845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1270.227381][T14845] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1270.277357][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.296278][T14845] usb 6-1: config 0 descriptor?? [ 1270.766611][T14845] uclogic 0003:5543:0522.0042: item fetching failed at offset 0/1 [ 1270.774547][T14845] uclogic 0003:5543:0522.0042: parse failed [ 1270.789644][T14845] uclogic: probe of 0003:5543:0522.0042 failed with error -22 [ 1270.978920][ T12] usb 6-1: USB disconnect, device number 33 [ 1271.755674][T25472] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1272.126020][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1272.139124][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.156693][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.185645][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1272.199779][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1272.209256][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.219672][T25472] usb 6-1: config 0 descriptor?? 11:11:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x701902, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0xf8}, 0xa) 11:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x10d) 11:11:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x2}}) 11:11:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:56 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(0x0, 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x300) [ 1272.361102][T23152] debugfs: Directory '23152-4' with parent 'kvm' already present! [ 1272.369471][T23151] fuse: blksize only supported for fuseblk [ 1272.395719][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1272.403098][T25472] usbhid: probe of 6-1:0.0 failed with error -71 11:11:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x3}}) [ 1272.442605][T25472] usb 6-1: USB disconnect, device number 34 [ 1272.472599][T23171] debugfs: Directory '23171-4' with parent 'kvm' already present! 11:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x500) [ 1272.518661][T23185] fuse: blksize only supported for fuseblk [ 1272.550426][T23185] fuse: blksize only supported for fuseblk 11:11:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x4}}) [ 1272.598893][T23189] debugfs: Directory '23189-4' with parent 'kvm' already present! 11:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x600) [ 1272.675749][T23198] fuse: blksize only supported for fuseblk 11:11:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x5}}) 11:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x700) [ 1272.722984][T23204] debugfs: Directory '23204-4' with parent 'kvm' already present! [ 1272.791559][T23213] fuse: blksize only supported for fuseblk [ 1272.815963][T25472] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1272.825725][T23213] fuse: blksize only supported for fuseblk [ 1272.840865][T23218] debugfs: Directory '23218-4' with parent 'kvm' already present! [ 1273.196050][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1273.212407][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.251204][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.264859][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1273.281769][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1273.291965][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.302783][T25472] usb 6-1: config 0 descriptor?? [ 1273.776436][T25472] uclogic 0003:5543:0522.0043: item fetching failed at offset 0/1 [ 1273.784305][T25472] uclogic 0003:5543:0522.0043: parse failed [ 1273.815579][T25472] uclogic: probe of 0003:5543:0522.0043 failed with error -22 [ 1273.979436][T25472] usb 6-1: USB disconnect, device number 35 [ 1274.745445][T25472] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1275.125443][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1275.136395][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.147920][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.158062][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1275.171346][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1275.180778][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.190900][T25472] usb 6-1: config 0 descriptor?? 11:11:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x900) 11:11:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x6}}) 11:11:59 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(0x0, 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:11:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)={0x3d4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_TESTDATA={0x6b, 0x45, "3bbea43954d3628727726a01df36f1652b5f5d50178eeb1e0340ea88e322bb90191f250bfc82adeb0e366478f684a739e1e0c8d24a111e5eb036e55d0315e0fc2994d39bc70d2ba2e7d3c76610672397c335df14cb5ba208ec90df9b10adfea0aa50d61779be95"}, @NL80211_ATTR_TESTDATA={0xa7, 0x45, "1bf0e6d14b11328a535d8e52c36d1ef50263107ecd322f4e12252938db23510a08cfb62902edd7d570cb3fe163b8f079fa147fe0bcdc94dc442f866eb9b6a2f3dfc4dfafcb2dab2cda5cdcade9973958a57bd60453cab5c0197653fa4d051f44b443204c71d6a6c7d723e0e13aa047754bf71bea48320e1127e873469240e31ffb2d8444e8234f8a175f1812dc71ece00ad13f201b0332469497493dbfcecafee690c2"}, @NL80211_ATTR_TESTDATA={0x5d, 0x45, "14fb87fc544384456d0dd0ea84be6847a4e33a23999497116856bf8db45f998c8398a979b6710bb367a8c725f031472614adbf58b602e38aa0f5a3887640c2cd8efb945797aab1886e2d3108d10097d2ed30c889a86ec9749b"}, @NL80211_ATTR_TESTDATA={0x79, 0x45, "3bf8a30f01d37c8e7d4bdb2f993178ae9dd25f15175e9323dbe7b41d5a1d0c551a399fe58f5b28b3c7d8bac54d96ac843d1bc7da3f875d07282729a96422a4e6ef747f5bc7954499f9d64c3dd7cccdaae859ccd4e14952c44d26117ce482c709b62fb33f7129329d8d2342af627f047c1908e9afde"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "eec21fa2982a515d0b7638eafa94d8"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "ef013595da6d361f5adf035f0fc47e1fb1bb20f8266a38bcff94b65160eae6a56bc867e4b8df698407490add00e2207d05f99b63f2422a69722e8d58c50147262b4891e62d4237e5f4c6d91f164fa7bdf8cda37b0faa005423f2dbb448"}, @NL80211_ATTR_TESTDATA={0xba, 0x45, "6efe5976e1a3ee9a8d8f59e98f83f1f171b2118c908404b4315517a20f232707da7479c90035b72cbcf86b7c89ccfc8395fa7562a803d71148f0f6e41a81bc2072acf66c90d75f9cf0a561620726450857b9db980a05c9d27a807c9c637c16b7f0efbd385f89dfa8974e0a57210877ac9041ff3e55285ea4dfaf14d0d92ee0678e62c3333b6c434c459d3a54754858e94c68cee059d2a745cccb56fce6c7b0bf17c2192ccabe738886b70a8dbbb9ccae1e2d13c6db9a"}, @NL80211_ATTR_TESTDATA={0x88, 0x45, "989505b56efe46afec001fe0272707b1bdc84ba9a2850055b47b2334520f0ff44765783f2da4d6622697f672767b158c5e85445b6d58192241b734e6f42249953c54410b624ad9a8e7e4e5d7cd55b751242820dcb2c242ddbb4fb1bf85124ec13033662c140a47a99df9dbc442e5b5b12e92bbd08090e6857d68dd7f52ac29b3a29d7abc"}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040435522054000000000010914f84d23576f085bb35785bb49c7c567022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="da6ce778ffba67842908158f065bfed482263a16afe7b2fc1b9772c2c532"], 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000000c0)={0x5, 0x9}) 11:11:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001780)={0x0, 0x5, 0x0, [0x64c, 0x7, 0x5, 0xfffffffffffff6a2, 0x38a8], [0x200, 0xfb6, 0x0, 0x3, 0x80, 0x4, 0x2, 0x7, 0xf8d, 0x7ff, 0x3fbc568e0000, 0x3ff, 0x81, 0x4f, 0x7fffffff, 0x3, 0x800000000000005, 0x8, 0x3, 0xffffffff, 0x401, 0x3, 0x100, 0xf75, 0x6563, 0x80000001, 0x2, 0x400, 0x9d, 0x5, 0x80000000, 0xfffffffffffffffa, 0x4, 0x85f, 0xc000000, 0x3f, 0x811, 0x5, 0x3, 0x5, 0x2, 0x4, 0xfff, 0x3, 0x100000001, 0x6, 0xfffffffffffffffd, 0xc0, 0x6b1a, 0x8, 0x3, 0x6, 0x2, 0x4, 0xb64, 0x0, 0x800, 0x6, 0x5, 0x4, 0x6, 0x2, 0x2, 0x0, 0x6, 0x53fe, 0x5, 0x6, 0x1, 0x81, 0x1, 0xb565, 0xb2b0, 0x2, 0xffffffffffff5dc1, 0x7, 0x7f, 0x9a8f, 0x6, 0xffff, 0x9, 0x5, 0x0, 0x4, 0x7, 0x0, 0x4, 0xb6f0, 0x7, 0xfffffffffffffff9, 0x2, 0x1, 0x40, 0x401, 0x9, 0x9, 0x40, 0x7c, 0x1c4, 0xffffffffffff7fff, 0x81, 0x1, 0x5, 0x6, 0x1, 0x4, 0x66, 0x7ff, 0x2, 0x1, 0x82b, 0x4, 0x8, 0x101, 0x1ff, 0x1000, 0xfffffffffffffffe, 0x2, 0x7fffffff, 0x5, 0x7f]}) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xa2, 0xff, {r4}, {0xee01}, 0x6, 0x5}) rt_tgsigqueueinfo(r6, r4, 0x16, &(0x7f0000000000)={0x2d, 0x1ff, 0x6}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r7 = openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000140)) kcmp(0x0, r2, 0x1, r7, r0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0xbdf2, 0x4) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1275.393612][T23277] fuse: blksize only supported for fuseblk 11:11:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x1, 0x0, 0x41) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x728, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1275.445416][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1275.451538][T25472] usbhid: probe of 6-1:0.0 failed with error -71 11:11:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x7}}) 11:11:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 11:11:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x8}}) [ 1275.487419][T25472] usb 6-1: USB disconnect, device number 36 [ 1275.525913][T23307] fuse: blksize only supported for fuseblk 11:11:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 11:11:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x2180, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x1600, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12bc}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe6c9}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x7}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x9}}) [ 1275.600882][T23324] fuse: blksize only supported for fuseblk [ 1275.633947][T23324] fuse: blksize only supported for fuseblk 11:11:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xc00) [ 1275.714735][T23342] fuse: blksize only supported for fuseblk [ 1275.731871][T23342] fuse: blksize only supported for fuseblk [ 1275.797241][T23348] debugfs: Directory '23348-4' with parent 'kvm' already present! [ 1275.865388][T25472] usb 6-1: new high-speed USB device number 37 using dummy_hcd 11:12:00 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}, {r0, 0x200}], 0x5, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0xa}}) [ 1276.244725][T23367] fuse: blksize only supported for fuseblk [ 1276.316096][T25472] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1276.325398][T25472] usb 6-1: can't read configurations, error -61 [ 1276.485325][T25472] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1276.895334][T25472] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1276.902903][T25472] usb 6-1: can't read configurations, error -61 [ 1276.909796][T25472] usb usb6-port1: attempt power cycle [ 1277.635245][T25472] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1277.925213][T25472] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1277.932814][T25472] usb 6-1: can't read configurations, error -61 [ 1278.095200][T25472] usb 6-1: new high-speed USB device number 40 using dummy_hcd 11:12:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x7, 0x7}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:12:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 11:12:02 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000810}, 0x4010) preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) write(r3, &(0x7f0000000000)="834d7226faf66feab29343ed5a42dda965ee6441371e73eb4361fb78c4f2ac4442aade64536273dcc9acda3191552c7060a607f8e35dd42daaafd7adec452ca752975a4db154d44d8a7f4866a2844eabf4fb6ab315656139c6c0239e4d", 0x5d) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000180)=r5) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0xb}}) 11:12:02 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x6, 0x100000001}) perf_event_open(0x0, 0x0, 0xffffffffffefdffb, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x4e, 0x0, 0x10000, 0x1, 0x0, 0x5, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf2d]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:12:02 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}, {r1, 0x2020}], 0x4, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1278.355554][T25472] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1278.363112][T25472] usb 6-1: can't read configurations, error -61 [ 1278.370364][T25472] usb usb6-port1: unable to enumerate USB device [ 1278.435318][T23391] fuse: blksize only supported for fuseblk 11:12:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xd01) 11:12:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0xc}}) 11:12:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xe00) [ 1278.569084][T23412] debugfs: Directory '23412-4' with parent 'kvm' already present! [ 1278.599333][T23422] fuse: blksize only supported for fuseblk 11:12:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0xd}}) [ 1278.642824][T23422] fuse: blksize only supported for fuseblk [ 1278.676113][T23428] debugfs: Directory '23428-4' with parent 'kvm' already present! 11:12:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 11:12:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0xe}}) [ 1278.724486][T23438] fuse: blksize only supported for fuseblk [ 1278.782827][T23443] debugfs: Directory '23443-4' with parent 'kvm' already present! [ 1278.820611][T23451] fuse: blksize only supported for fuseblk [ 1278.845136][ T12] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1279.235463][ T12] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1279.256514][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.305573][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.316569][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1279.337382][ T12] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1279.346640][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.357408][ T12] usb 6-1: config 0 descriptor?? [ 1279.826067][ T12] uclogic 0003:5543:0522.0044: item fetching failed at offset 0/1 [ 1279.833917][ T12] uclogic 0003:5543:0522.0044: parse failed [ 1279.840223][ T12] uclogic: probe of 0003:5543:0522.0044 failed with error -22 [ 1280.026860][ T12] usb 6-1: USB disconnect, device number 41 [ 1280.794987][T25472] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1281.165618][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1281.176634][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.188269][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.198394][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1281.211645][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1281.220961][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.230321][T25472] usb 6-1: config 0 descriptor?? 11:12:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x10}}) 11:12:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 11:12:05 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}, {0xffffffffffffffff, 0x8000}], 0x3, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:05 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2, {0xb942, 0x0, 0x8001, 0x7}}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1, 0x2c4}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000001340)=""/4098, 0x1002) 11:12:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xb, "225e0e3f3bb98caac895842c93cd030d5a5e5c2c"}, 0x16, 0x3) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0xb0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x279}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x7, 0x7f}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x6a, 0x0, 0xff, 0x6}, 0x111, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x0}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000200)={0x7fffffff, 0x800, 0x1, 0xff, 0x9, 0x5524}) [ 1281.472113][T23497] debugfs: Directory '23497-4' with parent 'kvm' already present! [ 1281.489720][T23507] fuse: blksize only supported for fuseblk 11:12:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x11}}) 11:12:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x1200) [ 1281.554967][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1281.562223][T25472] usbhid: probe of 6-1:0.0 failed with error -71 [ 1281.590791][T25472] usb 6-1: USB disconnect, device number 42 11:12:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x12}}) 11:12:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x2500) [ 1281.611090][T23523] fuse: blksize only supported for fuseblk [ 1281.632615][T23527] debugfs: Directory '23527-4' with parent 'kvm' already present! [ 1281.732481][T23544] debugfs: Directory '23544-4' with parent 'kvm' already present! [ 1281.744357][T23546] fuse: blksize only supported for fuseblk 11:12:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x2800) 11:12:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x25}}) 11:12:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x48}}) [ 1281.837088][T23559] fuse: blksize only supported for fuseblk [ 1281.855939][T23557] debugfs: Directory '23557-4' with parent 'kvm' already present! 11:12:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x4c}}) [ 1281.883261][T23568] fuse: blksize only supported for fuseblk [ 1281.939236][T23574] fuse: blksize only supported for fuseblk [ 1281.994911][T25472] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1282.254898][T25472] usb 6-1: Invalid ep0 maxpacket: 32 11:12:06 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}, {r1, 0x262}], 0x2, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x5c00) 11:12:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x5c}}) [ 1282.404877][T25472] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 1282.432526][T23599] fuse: blksize only supported for fuseblk [ 1282.674850][T25472] usb 6-1: Invalid ep0 maxpacket: 32 [ 1282.680323][T25472] usb usb6-port1: attempt power cycle [ 1283.414829][T25472] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 1283.504817][T25472] usb 6-1: Invalid ep0 maxpacket: 32 [ 1283.655585][T25472] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 1283.765568][T25472] usb 6-1: Invalid ep0 maxpacket: 32 [ 1283.770982][T25472] usb usb6-port1: unable to enumerate USB device 11:12:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xff00) 11:12:08 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = getpgrp(0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4132, 0x1024) 11:12:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x60}}) 11:12:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='s'], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x3, 0x2000) r2 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x2, 0xee01, 0xee00, r2, r3, 0x0, 0x8}, 0x0, 0x0, 0x100000000, 0x682caec4, 0x9, 0x5, 0xf1af, 0x200, 0x8, 0x0, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r6 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x50182, 0x20}, 0x18) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x1, 0x0, @pic={0x2, 0x7f, 0x1, 0x7, 0xff, 0x74, 0xff, 0xb4, 0x7, 0x40, 0xb4, 0x8, 0x2, 0xfe, 0x34, 0x8}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:12:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @empty, 0x5}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022020000f4d47e"], 0x0}, 0x0) 11:12:08 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{r2, 0x500}], 0x1, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) [ 1284.541842][T23615] fuse: blksize only supported for fuseblk [ 1284.558668][T23618] tmpfs: Unknown parameter '0xffffffffffffffff0x0000000000000000' 11:12:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x68}}) 11:12:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x40000) [ 1284.586808][T23617] debugfs: Directory '23617-4' with parent 'kvm' already present! [ 1284.601994][T23628] tmpfs: Unknown parameter '0xffffffffffffffff0x0000000000000000' 11:12:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x35, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x3ff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f00000003c0)={0x7, 0x1, 0xb6, 0x2, &(0x7f0000000380)=[{0x1000, 0x1, 0x101, 0x3}, {0x7f, 0x5, 0x9, 0x5}]}) r5 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="236d5fd3ca4c843a508bb6ad184abcc7bc1eb1ba4bdae5108234f7a2043ceb2127ac05f57e4598b9db251d2b94f37dd866de59bce9feb0974aea5629a79056431cef8010d03a55dd1a8e6c5429f45bb0fa39e18dbfb45d0c230ed5bb37e89efafd291af32727fb38e198269582b2f07edfa8c1534e6365da5a282845241b58cfea9bc3c97efb335bba9829d5f44a354af43006d683f8599f5fa438f88b95080618435a1846c8ed2debd982bef823db4e115e73c539901dd99d", 0xb9, r2) keyctl$link(0x8, r2, r5) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x7ff}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r7, 0x1}, &(0x7f00000005c0)=0x8) 11:12:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x6c}}) [ 1284.654336][T23640] fuse: blksize only supported for fuseblk 11:12:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x231860) [ 1284.733464][T23660] fuse: blksize only supported for fuseblk 11:12:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x74}}) [ 1284.784999][T23664] debugfs: Directory '23664-4' with parent 'kvm' already present! 11:12:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 1284.836849][T23673] fuse: blksize only supported for fuseblk [ 1284.895908][T23680] debugfs: Directory '23680-4' with parent 'kvm' already present! [ 1285.017413][T25472] usb 6-1: new high-speed USB device number 47 using dummy_hcd 11:12:09 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [], 0x7a}}) 11:12:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xf0ffff) [ 1285.390510][T23702] fuse: blksize only supported for fuseblk [ 1285.406751][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1285.418356][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.437849][T23702] fuse: blksize only supported for fuseblk [ 1285.437947][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.454177][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1285.490749][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1285.500978][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.511434][T25472] usb 6-1: config 0 descriptor?? [ 1286.254561][T25472] usbhid 6-1:0.0: can't add hid device: -71 [ 1286.260553][T25472] usbhid: probe of 6-1:0.0 failed with error -71 [ 1286.271855][T25472] usb 6-1: USB disconnect, device number 47 [ 1286.964504][T10115] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1287.365406][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1287.376197][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.387319][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.397107][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1287.410061][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1287.419295][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.428968][T10115] usb 6-1: config 0 descriptor?? 11:12:11 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=0x7fff, 0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=""/254, &(0x7f0000000000)=0xfe) 11:12:11 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000), 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000A000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 11:12:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 11:12:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3dde5f5, 0x4100) mmap$snddsp(&(0x7f0000fe5000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r2, 0xd000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000000c0)={0x6, 0x6}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:12:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x2, &(0x7f0000001740)=[{&(0x7f0000000140)="dbe36dc64f89df2624c308408599fa1b4406833a6f9fca250138491a68c063e09e9815f265c947505236835b20433e4bd1d1eadd8acb9324fefbae2c4321eb5c8af7ba324f7ef340074b046e67778d58f1e14dd44b6d4f51e97912fc1e03ad4fd4a8a4eda77dffd88d0b0ba79f1c987050b91523b1e7509dea78ea0cd1b97c22347ba000c824bd06de1f600b1caf1ab191ca12d0edae5448f53ce497a17bc20de28cb88225dd391c3ad585a3a51eaba6860fae00fceaf47ece4c957e95ef19161c5d3641b8cac30ba0b9cb8ae7fa0111cd93c7b93c590371458fd8ad02589653ffbb0f94241d3cd695b16888", 0xec, 0x3}, {&(0x7f0000000240)="1fead05a157e99e63413a010b6e8e1e8a21006f4130bceb3f0cafa4e94bca8a63edf5b07279ac28ba586405dd373a761379a4ef8b05c1b000116338ba9111c82f805f0f70c4aecc3775fc179c3ff90cada97d1ac97b6120fbdd7059d40ca7e00aa07ebabca8226fdfcbf130c736f324c7e76ca5651d5e9a737f73c351143aa4309b2ffa34f4dd890fd29d97a98cbd88132296e37c5a801a8dcbf0af52ca63772f22a968f7ea5a13af619ec27528109c4ff", 0xb1, 0x7}], 0x180000, &(0x7f0000001780)={[{@skip_balance='skip_balance'}, {@nodatacow='nodatacow'}, {@nodiscard='nodiscard'}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@fragment_metadata='fragment=metadata'}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0xffffffffffffffff}}], [{@fowner_lt={'fowner<', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, ']{^.&&'}}]}) finit_module(r3, &(0x7f0000001840)=']!\x00', 0x1) preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000000)={0xa9, 0x3, &(0x7f0000001340)="49427992331b3bb6b357d33b84a834ef0193305ce072c6c6c45f497f18855d50a3b0ab9b48cbf812b544c05cedec2c273db0ea039b36b15b3b517e04bf286d7e8af72d98a6afbfa407767310dd26ef922a0510db67efe77c82200062c04c679a8f18e6f706dae7897a405d7110a36d34d046c6e43de9a5dbd525e6212ee8b43b4765daeabd900290f3e1902edd6e12b4c1f7bfcb42016ea6e5f506e4c8a24a265f638532752b658d6b94ad4b1c49a5c2b9a443ff0cce842592a460b4668ec7c2b5462d687c619cd60959f2b365052c0376a1c5aa2b531e034754f607e3618998854e463f9c21b44c34da857189a05e7fc84d7f005a76738214612453125e8a8161374a537bca500e696f2aa383b498ed77509b6155a68b1ceeab7de2ac925f91db5718fab31a4fe99aed981b65a6d8fc12caae94f5cf2756b47cdd54d9c63196851a8da93c4e9f88fe79b129e54840d884a186d305201ea09ba16663730c1f095d8532706d8da4462b1d58c62056ea7f4ff4c66d21c4c31c8e1cd41f47d156df5517de812f9a7f09087a268ec5dcd8e44af8e8034c6e25dea3e3c797666c62336bce4c81c1d2db2c095d787da1e4af1c138629748393f13b4466ec2b5f8e00d245990a8af8ecc720d4a1aa6fae1f6cfa046e28a61737c41a3a9b68c26c34211bcb6382f82be60e0f9a51bd1173d18f55c1ae8d66ae86a316142f38244e473630582cca729b8b65ab4be17f8879a97c5c5280852364571ba12b7efeeea996ef23927c24212d81aa2d42571cf9fe2f97b77710d7e862e2bdd9b3ca26e3a47889dc4e6a65284f9981abab232572ed778a92e330a62b0be51b3f36878d003127898a1bfd34b9ee40d6d1f86fddea0ca8fc219c8de212e2345468a6749d714b7da78d2ffb900f3819d778604f79c10c73f8948f401b79b8e1f5ba5b877fe6b6325a63dc77908fb30c132c5516f4a5be56ff8c387ba9b471a94f5e4c09bf39c9097e3e35fa7d304f6a1c6b7ba2d8fdcfcdc3d0180c7e48739dc89c45bac3d858635bb45fde58e5361ac7b8fbcaca46317ee9e3138b2ec4fa9a8cf304a13685b4bef8efb947e0039214130faac17b546df409efd49c2cd6411fb1f750ab95e616406b31a27fe90184002e25fb1d3264f3d69a65c557264f754b85f181395eff5b87c81d06bd4f740a162ff1b3383baf8302f75229cd6bc09ec21b950dd07737d078f9ecca2d8421f65bf384af602a11b5ca1501dbb65f8a607a5dc57c7652897d6b39d778b488962d321eee563e900217237ab958de8f85de60708bf43ea352883d0a7dae1ce957c8576af4340cb0642ef70adf05634b95afd1acafcebb7a67b1de5f5c116bec174116ef7a7ca5d0df8fb388ce33fc679ff41286ab884fc11fce25ac19e8f78dade2f3a7d0176c4988b53148a6ac47e2a5545bf96b9cc36231b293b154"}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x1040000) [ 1287.610254][T23752] debugfs: Directory '23752-4' with parent 'kvm' already present! 11:12:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1020000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x40}}]}}) [ 1287.674471][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1287.682260][T10115] usbhid: probe of 6-1:0.0 failed with error -71 [ 1287.693757][T10115] usb 6-1: USB disconnect, device number 48 11:12:11 executing program 2: r0 = syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x820000, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid'}}, {@smackfsdef={'smackfsdef', 0x3d, 'user_id'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x1, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x9, 0x101, {"1b8288f239588a871bb38c84da6d4658"}, 0x400, 0x200, 0x2000000}}}, 0xa0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000000)={0xd9, 0x1f}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:12:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x10d0000) 11:12:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x200, 0x7, 0x1, 0x3, 0xfffffffffffffffc, 0x40, 0x10000, 0x6, 0x9, 0x81, 0x3, 0x7fffffff, 0x5, 0x5, 0x10, 0x0, {0x9, 0x8001}, 0x3, 0x40}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, 0x8) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0xc) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/150, 0x96}], 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000280)=""/51, 0x33}], 0x3, 0x0) 11:12:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) [ 1287.858811][T23799] fuse: blksize only supported for fuseblk [ 1287.883160][T23805] fuse: blksize only supported for fuseblk [ 1287.908090][T23809] debugfs: Directory '23809-4' with parent 'kvm' already present! [ 1288.064484][T10115] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1288.500729][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1288.519081][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.531073][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.541252][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1288.554515][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1288.580836][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.590014][T10115] usb 6-1: config 0 descriptor?? [ 1289.085278][T10115] uclogic 0003:5543:0522.0045: item fetching failed at offset 0/1 [ 1289.093192][T10115] uclogic 0003:5543:0522.0045: parse failed [ 1289.099236][T10115] uclogic: probe of 0003:5543:0522.0045 failed with error -22 [ 1289.286405][T10115] usb 6-1: USB disconnect, device number 49 11:12:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022e7000000099c"], 0x0}, 0x0) 11:12:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c75b365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000380)={{r3}, 0x0, 0x24, @inherit={0x70, &(0x7f0000000080)={0x1, 0x5, 0x11, 0x7, {0x0, 0x5, 0x0, 0x3f, 0x91f}, [0x3f, 0x7ff, 0x2, 0x3, 0x0]}}, @name="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"}) 11:12:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 11:12:13 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x200400c0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:13 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000), 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:13 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@v2={0x0, 0x3, 0xb, 0x2, 0x2b, "72bb882577e2b32cd3ed9f423f21c84fbb452c0372113966ba3080ba24f1a5275c5e46f9c5f7c690c4ee08"}, 0x34, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fstatfs(r2, &(0x7f0000000140)=""/107) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x30) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1289.845763][T23857] fuse: Unknown parameter 'ułer_id' [ 1289.861567][T23863] debugfs: Directory '23863-4' with parent 'kvm' already present! 11:12:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) [ 1289.905394][T23857] fuse: Unknown parameter 'ułer_id' 11:12:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f643d953ff51108d7945d1cb9242aff95b49a48490270d75bfbd1f490cd39a9fb382935ab028812386d1b9a7c424de2fcedaf67aee9f6f6fffc39fe401e6f4d0300a999452360507ba6117ac07abfe29c4c3ff094dca30f245b60dbae771a39ec1bf2ea7beeaf693dbb38c2a1eea0ed6018f3b7d5c28b1e2dcb9a6d4211e31cea2e9838c0edd3e3bd7c63d1af3ba8a5b4d54611cefa9a656fa84a42252d7f8242", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)={0x5, 0x4dc3ba12, 0x7}) [ 1289.978459][T23884] debugfs: Directory '23884-4' with parent 'kvm' already present! 11:12:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) [ 1290.020979][T23892] fuse: Unknown parameter 'user_d' [ 1290.044566][T23892] fuse: Unknown parameter 'user_d' 11:12:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:12:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) [ 1290.086684][T23900] debugfs: Directory '23900-4' with parent 'kvm' already present! [ 1290.138007][T23908] fuse: blksize only supported for fuseblk [ 1290.144251][T25472] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1290.163985][T23913] fuse: blksize only supported for fuseblk 11:12:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1290.188428][T23914] debugfs: Directory '23914-4' with parent 'kvm' already present! [ 1290.263920][T23925] fuse: Bad value for 'user_id' [ 1290.504612][T25472] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1290.530487][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.572640][T25472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.598906][T25472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1290.618879][T25472] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1290.628145][T25472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.655565][T25472] usb 6-1: config 0 descriptor?? [ 1291.135118][T25472] uclogic 0003:5543:0522.0046: item fetching failed at offset 0/1 [ 1291.142973][T25472] uclogic 0003:5543:0522.0046: parse failed [ 1291.157376][T25472] uclogic: probe of 0003:5543:0522.0046 failed with error -22 [ 1291.336366][T14845] usb 6-1: USB disconnect, device number 50 [ 1292.104132][T10115] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1292.464124][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1292.474973][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.486492][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.496803][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1292.510351][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1292.519903][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.529171][T10115] usb 6-1: config 0 descriptor?? 11:12:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7f, @default, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:12:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 11:12:17 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000), 0x0, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfb, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x1f, 0x0, 0x0, 0x117]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355220640000000000109022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) r2 = dup(r1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000140)=""/49) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220a0000000b5c03dfaf03e307e9b5075dc90f56582652e8e8df8270da18022d7443261e8ed981163b5a7bd5429e2d3dc81af1bb2d3ed392"], 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000001c0)={0xa, &(0x7f0000000000)=[0x75, 0x400, 0x7, 0x12f3, 0x3, 0xb7, 0x5, 0xff, 0x7, 0x3d]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 1292.907514][T23974] fuse: blksize only supported for fuseblk [ 1292.914302][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1292.920608][T10115] usbhid: probe of 6-1:0.0 failed with error -71 [ 1292.948426][T10115] usb 6-1: USB disconnect, device number 51 [ 1292.961448][T23991] fuse: blksize only supported for fuseblk 11:12:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 11:12:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xd0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x778e}, {0xc, 0x90, 0x3f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x1ff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2}, 0x20008041) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:12:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x1c6a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="11060000c99f000000e46de7805c1efd50b8", @ANYRES32=r2, @ANYBLOB="08003700020000000500080000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="5cbdab60e86c294734837395580818090c00004f39f89fa6c11f7e5e5015a72dd283aaa2c943d783d3da5c06dbeec973d2421d9902270a51d79f46c2a8c26506ee8cb7610cb2e4b1603d159eaa70ae6d305ce4679513a115c854ccc348d578ee433df6f2b1431d1fa4fe996b2bb3a1d501a312", @ANYRES16=0x0, @ANYBLOB="001129bd7000fddbdf253d000000081c0300", @ANYRES32=r2, @ANYBLOB="08005d000000000008005d000100000008005d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x39b883, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/45}, {&(0x7f0000000180)=""/105}, {&(0x7f0000000200)=""/66}], 0x1000000000000358, 0xffffffff, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000100)=0x100) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:12:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) [ 1293.095695][T24010] debugfs: Directory '24010-4' with parent 'kvm' already present! [ 1293.095734][T24012] fuse: blksize only supported for fuseblk [ 1293.115099][T24019] fuse: blksize only supported for fuseblk 11:12:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 11:12:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x7, 0x1, 0x4, 0x8, 0x24, {0x0, 0x2710}, {0x4, 0x0, 0x3, 0x5, 0x20, 0x7, "580fda9a"}, 0x1ff, 0x3, @fd, 0xfffffffd}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={{}, 0xe8, 0x1, &(0x7f0000000140)="7a07e04667c43d1c4e511893f65686227ed16bfc7afc531fced28fce3cbd874ac832579e3fbf0b994993c2bb4ef2a0e479342f33e0107579864266e46dfc20e8b200c3fdd24082402451a46fcfb7668911a7eedbdb656b1dbda205f1a60709790526019e167d20670eaf074fdbfe0c483fa333598972db7270a70c69461484b3d74cd792e3ab0a3221f2201591e759ad6aa15278d8782f84be90e22ca52af557f3b3a90392592ef449b8ee5c97e96b5204e9d54f5a33175d6115a6451e228d9dc6ff78c9e9027272f17e0e5e4af664c430e6a5c991c835e839550e84a62b1dd0d21f6110a329136b"}) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000000)=0x995) [ 1293.182904][T24028] fuse: blksize only supported for fuseblk [ 1293.191467][T24028] fuse: blksize only supported for fuseblk 11:12:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) fcntl$getown(r3, 0x9) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'macvlan0\x00', {}, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) [ 1293.224968][T24030] debugfs: Directory '24030-4' with parent 'kvm' already present! [ 1293.260541][T24042] fuse: blksize only supported for fuseblk [ 1293.296661][T24048] fuse: blksize only supported for fuseblk [ 1293.333992][T10115] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1293.339995][T24050] debugfs: Directory '24050-4' with parent 'kvm' already present! 11:12:17 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10840, 0x0) fcntl$lock(r2, 0x3, &(0x7f0000000100)={0x2, 0x0, 0x1ff, 0x3}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="68000087000700000084e86099e16bad36f09b9c189f8f27bf3152f5bc36af3cecd53f675c489ae3259c7f858bef42e247e90bf136ad94ce49bb8f42338a8b30d8864545b9680171f280564cf6762956d1b89701a3b473d3939d610900000000"], 0x40c000) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 11:12:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x500}], 0x1, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x8090, &(0x7f0000000080)="02fc939f094ce8f47e871aacc1847750f8e4d0d25fb0b99e19dc35d286ed8963f4c0d2e05baf2560f8013166ecf80f2b0ac0530e122391612aa36a2d8505555e21b0f883e08d86037aaea10b781f4dac6aa0af5f4fdc195f76f486a1db805482df2b0a6aafee4875310961764e91aaa4ddd40c98e7833413cb3e3a710f0b0f59f540f7a4110eebeefb0dca7157b44cd3b8fdff8b6fe68f47f518d31ac2afcc29bcaa2dcf1e92df478c3f164b0e3e55e5635db5d1a8bbd9779f1931") r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303030303030303030ff030000000000003034303030302c757365725f693900", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) [ 1293.718112][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1293.741922][T24067] fuse: Bad value for 'rootmode' [ 1293.747834][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.778987][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.807740][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1293.852331][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0622, bcdDevice= 0.40 [ 1293.872932][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.893149][T10115] usb 6-1: config 0 descriptor?? [ 1294.374950][T10115] hid-generic 0003:5543:0622.0047: item fetching failed at offset 0/1 [ 1294.383751][T10115] hid-generic: probe of 0003:5543:0622.0047 failed with error -22 [ 1294.581803][T14845] usb 6-1: USB disconnect, device number 52 [ 1295.383933][T10115] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1295.774306][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1295.785578][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.797388][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.807496][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1295.820961][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0622, bcdDevice= 0.40 [ 1295.830425][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.840227][T10115] usb 6-1: config 0 descriptor?? 11:12:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sync_file_range(r1, 0xfffffffffffffe01, 0x20, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8, 0x6}, {0x2, 0x3}, {0x7f}, {0x8, 0x6}, {0x0, 0x2}, {0x20}, {0x3f, 0x5}, {0xcb, 0x4}, {0x4, 0x5}, {0x7f}, {0x6}, {0xff, 0x7}, {0x7b}, {0x3, 0x2}, {0x76}, {0x7f, 0x6}, {0x8, 0x2}, {0x42, 0x5}, {0x4, 0x5}], "d0e97db7a44c3da7"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:12:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) 11:12:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioperm(0x8, 0x1000, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:20 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x500}], 0x1, 0xfffffffb) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001340)={0x0, 0xb73a, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001740)={0x2, 0x2000000, @start={r5, 0x1, "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", "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"}, [0x5, 0x4, 0x8, 0x10001, 0x4, 0x5, 0xffff, 0x7, 0x1, 0x8, 0x3, 0x6, 0x55e, 0x0, 0x55, 0x8001, 0x0, 0xff, 0x1, 0xfffffffffffff69a, 0x9, 0x3, 0xffff, 0x3, 0x7, 0x6, 0x8, 0xcbba, 0x2, 0x0, 0xbfb6, 0x762, 0x5, 0x5, 0x1f, 0x3, 0x8e8d, 0x3, 0x4, 0x3ff, 0x7f, 0xfffffffffffffffe, 0x2, 0x101, 0x100000000, 0x30f4e32600, 0x9, 0xff, 0x4e0e, 0x2, 0x40, 0x3, 0x0, 0x100000000, 0xfffffffffffffffb, 0x7, 0x32, 0x14d9, 0x4, 0xfff, 0x29, 0x52, 0xe8a, 0x4]}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x611, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0x33}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8810) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:12:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000280)) preadv(r1, &(0x7f00000017c0), 0x201, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7}) syz_usb_control_io(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, "9c"}]}}, 0x0}, 0x0) 11:12:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f758e6ecc513d", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) [ 1295.968923][T24123] fuse: blksize only supported for fuseblk [ 1295.979241][T24122] debugfs: Directory '24122-4' with parent 'kvm' already present! [ 1295.980711][T24131] fuse: blksize only supported for fuseblk 11:12:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) [ 1296.014071][T10115] usbhid 6-1:0.0: can't add hid device: -71 [ 1296.020382][T10115] usbhid: probe of 6-1:0.0 failed with error -71 [ 1296.039198][T10115] usb 6-1: USB disconnect, device number 53 11:12:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) [ 1296.084283][T24141] fuse: Unknown parameter 'grouŽnĚQ' 11:12:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000080)="4349968ef1d51fe6a6b1efb0fd173257c015ca563fd6b5aeee8185a696e52183385953abefb75c41c3e9fe26b27ad745b1b6038c151d8e4b86918ee90fae494bee77d91f715c3816c657aa6ab066a216d3d1e2e0be180cc1f7c6213f46fde5e90e51cec91641c8f6137e9b2256b25931025348ad2ad1b4d55b655867d172125c01fe72b1d68b21c990cdc42e7728920a09028bae469db8778120f136dc493640d32ee1f37a30179cf771702a171b7002fc2d27eeba7fb387e9de72c8", 0xbc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4004011) preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000140)=""/195, &(0x7f0000000000)=0xc3) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000240)={&(0x7f0000000440)=[0x4, 0x0, 0x80000000, 0x81, 0x9, 0x4, 0x0, 0xcd24, 0x5, 0x401, 0x500, 0x6, 0x6, 0x6, 0x9, 0x0, 0x4, 0x0, 0x36, 0x9, 0x9, 0x8, 0x7, 0x5, 0x400, 0x503, 0x401, 0xbc, 0x4, 0x1f, 0xffffffff, 0x7, 0x4, 0x8, 0x40, 0xffffffff, 0x7, 0x20, 0x80000000, 0x7, 0xfff, 0x4, 0x800, 0x0, 0x4, 0x44b, 0x5, 0x81, 0x3e2, 0x4, 0x0, 0x9, 0x8, 0x3, 0x84b, 0x10001, 0x80000000, 0xdf, 0x9, 0x4000, 0xffff, 0x0, 0x31, 0x9, 0x2, 0x7, 0xa2, 0x6d1, 0xb45, 0x5766, 0x1, 0x1f, 0x3, 0x0, 0x6, 0x40, 0x3, 0x3, 0x9, 0x1000, 0x52db4000, 0x80000001, 0x9, 0x40, 0x91d2, 0x80000001, 0x2, 0x0, 0xf9, 0x2, 0x198a, 0x0, 0x8, 0x0, 0x200, 0x4, 0xfffff937, 0x3ff, 0x14e0, 0x3, 0x7, 0x8, 0xae9, 0x5, 0x592, 0x101, 0xffff0000, 0x196, 0x7, 0x401, 0x3, 0x9, 0xac, 0x3, 0x60, 0x401, 0x45e, 0x1f, 0xf8c, 0x9, 0x2, 0x10000, 0x7, 0x7, 0x401, 0x7, 0x4d7, 0x7, 0x8, 0x4, 0x495e, 0x8, 0x8, 0x4, 0x857c, 0x3, 0x80000001, 0x99, 0x3, 0x4, 0x7f, 0x0, 0x80000000, 0xa4, 0x6, 0x6, 0x9, 0x408, 0x7, 0x2, 0x401, 0xfffffffe, 0x8, 0xa2, 0x1000, 0xffff03c9, 0x5, 0x8000, 0x1, 0x20, 0x0, 0x0, 0x1, 0xd62b, 0xfffff319, 0x2, 0x8, 0x3, 0x10001, 0x47, 0x7, 0xf5, 0x4, 0xd8a, 0xffff8001, 0x0, 0x1ff, 0x4, 0x1, 0x3, 0x0, 0x7f, 0x8, 0x5, 0xc3, 0xc8, 0xc000000, 0x2, 0x40, 0x8, 0xfff, 0x80, 0xffffffff, 0xfff, 0x80000000, 0x9, 0x0, 0xfffffffa, 0x0, 0x9, 0x10001, 0x8, 0x0, 0x3, 0x7, 0x7, 0x3, 0x8, 0x4, 0x0, 0x9, 0x104e0bcf, 0x5, 0x6b, 0x200, 0x277, 0xd89f, 0xffffffff, 0xfffffffd, 0x8, 0x1, 0xf256, 0x0, 0x101, 0x101, 0x9, 0xe1de, 0xffff714c, 0x4, 0x20, 0xcebb, 0x5d6, 0x2b, 0x9, 0x7f, 0x200, 0x8, 0x6, 0x2c, 0x0, 0x2, 0x80, 0xb00, 0x5, 0x3ff, 0x4, 0x100010, 0x40, 0xe6df, 0x1, 0xd70, 0x1, 0x25, 0x1f, 0x9, 0x101, 0x8, 0x7, 0xffffffff, 0xffff0ac0, 0xffffffff, 0x7fffffff, 0x2, 0x70, 0x200, 0xfffffffe, 0x9, 0x11, 0x9962, 0x4, 0x800000, 0x6, 0x2, 0xf7, 0x2, 0x80, 0xffffffff, 0x10000, 0x800, 0x80, 0x6, 0x7, 0xfff, 0x8, 0x4e6f6a9f, 0x8001, 0x0, 0x4, 0x3, 0x6, 0x3, 0xffffaab4, 0x401, 0x100, 0xfffffffc, 0x6, 0x101, 0x0, 0x1000, 0x1691, 0x1e6, 0x8, 0x6, 0x2, 0xbeec, 0x200, 0xffffff01, 0xacde, 0x1f, 0x4, 0x5, 0x3, 0x29, 0xc0c1, 0x7, 0x6, 0x2b1, 0x2f8, 0x5, 0x1000, 0x4419, 0x14b3, 0x9, 0x4, 0xf4, 0x2, 0xbb8d, 0x3, 0x40, 0x91, 0x9, 0x100, 0x7, 0x7, 0x5, 0x5, 0x3, 0xfffff801, 0x400, 0x6, 0x9, 0x7fff, 0x3, 0x1f, 0x4, 0x6, 0x8, 0xfffff095, 0xfffffff7, 0x7, 0x2, 0x2, 0x6, 0x5, 0x10, 0x6, 0x8000, 0x7a1d, 0x20b, 0x1, 0x1, 0xffffffe0, 0x3, 0x8, 0xff, 0x1, 0x2, 0x7, 0x1bb, 0x800, 0x4, 0x458, 0x3, 0x5ca7, 0x1ff, 0x4, 0x0, 0x876, 0x5, 0x3, 0x10001, 0x3a3, 0x0, 0x92, 0x9, 0x3, 0x7, 0x20, 0x5, 0x7f, 0x7, 0x80000001, 0x10000, 0x40, 0x80, 0x7fff, 0x70e, 0x42, 0x1, 0x5, 0x8, 0x0, 0xfffffe01, 0xfffeffff, 0x0, 0x9, 0x6c4, 0xffff, 0x9, 0x8000, 0x9, 0x80000001, 0xb87, 0xc24, 0x63f, 0xa2af, 0x5, 0x8, 0x7, 0x3ff, 0x6, 0x1, 0x0, 0x3, 0x0, 0x5a, 0xffffffff, 0x3ab, 0x5, 0x7f, 0x403b, 0xe04, 0x9, 0x3ff, 0x7fff, 0xffff7b54, 0x40, 0x26c9, 0x6, 0x800, 0x10, 0xa3, 0x8000, 0x7, 0x229, 0x6, 0x5, 0x80, 0x1, 0x2, 0xfffffff8, 0x401, 0x8, 0xfffffa7d, 0x1, 0x7ff, 0x200, 0x8, 0x9, 0x668, 0x5, 0x800, 0x8000, 0x7f, 0x0, 0x40, 0x9, 0x4, 0xffff, 0x6f5ae157, 0x8, 0x40, 0x4, 0xb041, 0x8, 0xb610, 0xe42, 0x1, 0x100, 0x3, 0x7, 0xffffffff, 0x81, 0x380, 0x4, 0x400, 0x6, 0x6c, 0x9, 0x155, 0x3ff, 0x3, 0xd, 0x4, 0x7fff, 0x1e9, 0x6, 0x3, 0x1519a00, 0x39, 0xffffff11, 0x4, 0x9, 0x81, 0x7f, 0x8000, 0x8, 0x6, 0x0, 0x9e69, 0x2, 0x8, 0x1, 0x1f, 0x9, 0x8e9a, 0x4, 0x0, 0x1, 0x200, 0xff, 0x44, 0x2, 0x7, 0x0, 0x5, 0x1f, 0x80000000, 0x20, 0x7, 0xfff, 0x6, 0x4, 0x20, 0x9, 0x9, 0x4, 0x8, 0x1f, 0x3, 0x0, 0xfffffffe, 0x66d9, 0x9, 0x40, 0x10001, 0xdc, 0x2ed, 0xd4e, 0x8, 0x3, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, 0x2, 0x5, 0x4, 0x0, 0x800, 0xfffffff7, 0x9, 0x3, 0x2, 0x10000, 0x2, 0x1, 0x9f, 0xf63, 0x101, 0x0, 0x6, 0x306d7ab6, 0x401, 0x8000, 0xfffffff8, 0x2, 0x6, 0xff, 0x6, 0x81, 0x2b, 0x2, 0xfffffff7, 0x8, 0x3, 0x4, 0x80, 0x8001, 0x9, 0x200, 0x0, 0x3ff, 0x5, 0x40000000, 0x0, 0x9, 0xb26, 0x3ff, 0x1, 0x20200, 0x1, 0x42, 0x0, 0x9, 0x5, 0x0, 0x80000001, 0x20, 0x3, 0x100, 0x0, 0x6, 0x0, 0xff, 0x3, 0x4, 0x10000, 0x5, 0x5, 0xffffffff, 0x0, 0x8, 0x7fffffff, 0x7, 0xef, 0x6, 0x2, 0x0, 0x1, 0x71, 0x1, 0x9, 0x1, 0x7f, 0x3, 0x2, 0x2, 0xc4, 0xffffd725, 0x0, 0x2, 0xffff, 0x5, 0x2, 0x200, 0xb663, 0x78, 0xfff, 0x10000, 0x80000000, 0x3, 0x1, 0xfff, 0x6, 0xfffffff8, 0xfff, 0x4, 0x5, 0x6, 0x20, 0x3f, 0xffff, 0xfffffffa, 0xdbc8, 0x2, 0x1, 0x8, 0x2370, 0x9, 0x3, 0x2, 0x9, 0x4, 0x5, 0x7, 0x6d, 0x8000, 0x8000000, 0x1f, 0x7, 0x80, 0x6, 0x2, 0x6, 0x200, 0x3, 0x6, 0x1f, 0x3, 0x0, 0x0, 0x1, 0x100, 0x100, 0x3, 0x8, 0x20, 0x1000, 0x2e, 0x0, 0x200, 0x0, 0x10001, 0x1, 0x1, 0x4, 0x0, 0x10000, 0x7fffffff, 0x7fffffff, 0x7, 0x7, 0x1, 0xec02, 0x9, 0x3, 0x6, 0x6, 0x9, 0x0, 0x7f, 0x7f3, 0x7ff, 0x3, 0xbb07, 0x2, 0x2a400, 0x0, 0x0, 0x6, 0x800, 0x6, 0x20, 0x960, 0x2, 0x101, 0x1, 0x400, 0x40, 0x12e3, 0x100, 0x800, 0x5, 0x80000000, 0x7fffffff, 0x2, 0x8, 0x5, 0x800, 0x1, 0x200, 0x80000000, 0x1, 0x200, 0x3, 0x3, 0x400, 0x8001, 0xffffffff, 0xfa0, 0x6e80, 0x6, 0x3, 0x3f, 0xda, 0x1, 0x3, 0x6, 0x3f, 0x0, 0x0, 0x4, 0x100, 0x3, 0xc766, 0x6, 0x2, 0x596, 0x2, 0x2, 0x0, 0x81a6, 0x20, 0xb4, 0xfffffffc, 0xda55, 0x10001, 0xa2, 0x0, 0x8, 0x52, 0x3, 0x8001, 0x9e, 0x7, 0x3, 0x8, 0x0, 0xfffffff8, 0x10000, 0x7, 0xd2c3, 0x3, 0x500, 0x4, 0x9, 0x9, 0x5, 0x6, 0x5, 0x1, 0x410, 0x5, 0x2cc, 0x7fff, 0x6, 0xed, 0x4, 0xf3, 0x401, 0x0, 0x8, 0xd170000, 0x3, 0x730a, 0x5, 0x0, 0x80, 0x400000, 0x3, 0x800, 0x6f800000, 0x2, 0x4ae9, 0x8e, 0x8000, 0x7, 0xb464, 0x1000, 0x3, 0x9, 0x0, 0x401, 0x8, 0x1f, 0x4, 0x3, 0x9, 0x6, 0x40, 0x101, 0xffffff7f, 0xffffff6c, 0x61, 0xfff, 0x10000, 0x40, 0x5, 0x101, 0x400, 0x4, 0xf6, 0x6, 0x4, 0x7, 0xacc3, 0x2, 0x7, 0x5, 0x100, 0x400, 0x2, 0x101, 0x8, 0x2, 0x69, 0x7, 0x8000, 0x8, 0xfffffffa, 0x9ff, 0x0, 0xe8, 0x3b0, 0x6, 0x10000, 0x9, 0x10000, 0xffff7fff, 0x0, 0xff, 0x80000001, 0x7f, 0x99, 0xffffff80, 0x9, 0x9, 0x5106, 0x8, 0x5, 0x9, 0xff800000, 0x81, 0x54, 0x5, 0x7fffffff, 0x7, 0x0, 0x7fff, 0xfff, 0x5, 0x13f, 0xffff, 0x3, 0x0, 0x5, 0x3, 0x2, 0x38, 0x2, 0x101, 0x65, 0x0, 0x6, 0x8, 0x5, 0x4, 0xb684, 0x1, 0x200, 0x400, 0x6, 0x20, 0x3, 0x0, 0x6, 0x52, 0x7, 0x1f, 0x1, 0xef03, 0x6, 0x8, 0x1, 0x0, 0x0, 0x9d72, 0x80000001, 0x8, 0xfffffff8, 0x7, 0x8, 0x1d, 0x8a, 0xc186, 0x3, 0x1f8, 0x2, 0x522, 0xe8, 0x3, 0x8000, 0xfffffffb, 0x7, 0x101, 0x7c, 0x5, 0x0, 0x3, 0x1, 0x7, 0x100, 0x9c, 0x2, 0x25b, 0x1, 0x3, 0x4, 0x1, 0x2, 0x0, 0x8, 0x6, 0x7bb0, 0xff, 0xbf, 0x6, 0x6, 0xdfe2, 0x200, 0x0, 0x101, 0x7ff, 0x9, 0x4, 0x7, 0x171, 0x8, 0x1, 0x1, 0x0, 0x1d, 0x200, 0x7, 0x3, 0x8, 0x4, 0x6, 0x73, 0x0, 0x1, 0x9, 0x4, 0x401, 0x9, 0xe4, 0x6, 0x1000, 0x5], 0x7, 0x400, 0x7, 0x50}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) [ 1296.143510][T24158] debugfs: Directory '24158-4' with parent 'kvm' already present! 11:12:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 11:12:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)) [ 1296.280324][T24174] debugfs: Directory '24174-4' with parent 'kvm' already present! [ 1296.297350][T24180] fuse: blksize only supported for fuseblk 11:12:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 11:12:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000080)="9e976a57cb0bca38d5ef1280ec4f9f0c9e0be00022512c97cac89fcfd9da7d59e5532010c0a1f8e22be8a3b4a308a1837d7b4f6d2d02838192ea52937e1a5741848b5ee0a1", &(0x7f0000000000)=""/25}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000240)='{\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmkde=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) [ 1296.331859][T24184] fuse: blksize only supported for fuseblk [ 1296.382271][T24189] debugfs: Directory '24189-4' with parent 'kvm' already present! [ 1296.429750][T24198] 9pnet_virtio: no channels available for device ./file0 [ 1296.443920][T10115] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1296.465517][T24198] fuse: Unknown parameter 'rootmkde' [ 1296.480670][T24203] 9pnet_virtio: no channels available for device ./file0 [ 1296.497282][T24198] fuse: Unknown parameter 'rootmkde' [ 1296.874105][T10115] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1296.896976][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.908981][T10115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:12:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="660f3a4108c1f30f0967660f1a37130000000f20e06635000004000f22e00f22e20f09f36c0f01d1", 0x28}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000140)={0x80, "11359e88aa1b9940be04b465de13d1720c2f641df0c9a5d83bad39c00d9ce2095d85a9de267ef4e3bb8020a0e606f0e9566bc1e2ce185964be55e70618de33fd"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x201, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x1f, 0xfffffffffffffffb}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x6}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:21 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x7fff) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29}) read$hidraw(r0, &(0x7f0000000340)=""/4096, 0x1000) 11:12:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x79) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r6, 0x331, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) accept4(r2, &(0x7f0000000480)=@ethernet={0x0, @link_local}, &(0x7f0000000500)=0x80, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x34, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x184}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xeca}]}, 0xfffffffffffffedd}, 0x1, 0x0, 0x0, 0xc0c5}, 0x8880) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x201, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x49}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6004880}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 1296.919390][T10115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1296.932995][T10115] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 1296.942839][T10115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.952380][T10115] usb 6-1: config 0 descriptor?? [ 1297.030203][T24226] fuse: blksize only supported for fuseblk [ 1297.424638][T10115] uclogic 0003:5543:0522.0048: item fetching failed at offset 0/1 [ 1297.432566][T10115] uclogic 0003:5543:0522.0048: parse failed [ 1297.448896][T10115] uclogic: probe of 0003:5543:0522.0048 failed with error -22 [ 1297.647938][T10115] usb 6-1: USB disconnect, device number 54 [ 1297.832174][T24227] ================================================================== [ 1297.840284][T24227] BUG: KCSAN: data-race in direct_page_fault / kvm_mmu_notifier_invalidate_range_end [ 1297.849719][T24227] [ 1297.852124][T24227] write to 0xffffc900e264a188 of 8 bytes by task 24225 on cpu 0: [ 1297.859828][T24227] kvm_mmu_notifier_invalidate_range_end+0x39/0xa0 [ 1297.866314][T24227] __mmu_notifier_invalidate_range_end+0x18e/0x210 [ 1297.872800][T24227] change_protection+0x13c9/0x16b0 [ 1297.878022][T24227] mprotect_fixup+0x37a/0x580 [ 1297.882683][T24227] do_mprotect_pkey+0x4bb/0x5f0 [ 1297.887557][T24227] __x64_sys_mprotect+0x44/0x50 [ 1297.892391][T24227] do_syscall_64+0x39/0x80 [ 1297.896794][T24227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1297.902676][T24227] [ 1297.904996][T24227] read to 0xffffc900e264a188 of 8 bytes by task 24227 on cpu 1: [ 1297.912606][T24227] direct_page_fault+0x1c6/0x740 [ 1297.917524][T24227] kvm_tdp_page_fault+0x92/0xa0 [ 1297.922354][T24227] kvm_mmu_page_fault+0xca/0x410 [ 1297.927274][T24227] handle_ept_violation+0x2bf/0x660 [ 1297.932452][T24227] vmx_handle_exit+0x558/0xc30 [ 1297.937200][T24227] vcpu_enter_guest+0x1ada/0x2660 [ 1297.942210][T24227] vcpu_run+0x26e/0x740 [ 1297.946352][T24227] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1297.951794][T24227] kvm_vcpu_ioctl+0x565/0x950 [ 1297.956718][T24227] __se_sys_ioctl+0xcb/0x140 [ 1297.961296][T24227] __x64_sys_ioctl+0x3f/0x50 [ 1297.965871][T24227] do_syscall_64+0x39/0x80 [ 1297.970267][T24227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1297.976136][T24227] [ 1297.978445][T24227] Reported by Kernel Concurrency Sanitizer on: [ 1297.984583][T24227] CPU: 1 PID: 24227 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1297.993247][T24227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.003287][T24227] ================================================================== [ 1298.011329][T24227] Kernel panic - not syncing: panic_on_warn set ... [ 1298.017952][T24227] CPU: 1 PID: 24227 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1298.026601][T24227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.036640][T24227] Call Trace: [ 1298.039917][T24227] dump_stack+0x10f/0x19d [ 1298.044232][T24227] panic+0x207/0x64a [ 1298.048119][T24227] ? vprintk_emit+0x44a/0x4f0 [ 1298.052781][T24227] kcsan_report+0x684/0x690 [ 1298.057310][T24227] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 1298.062841][T24227] ? direct_page_fault+0x1c6/0x740 [ 1298.067937][T24227] ? kvm_tdp_page_fault+0x92/0xa0 [ 1298.072947][T24227] ? kvm_mmu_page_fault+0xca/0x410 [ 1298.078040][T24227] ? handle_ept_violation+0x2bf/0x660 [ 1298.083396][T24227] ? vmx_handle_exit+0x558/0xc30 [ 1298.088318][T24227] ? vcpu_enter_guest+0x1ada/0x2660 [ 1298.093503][T24227] ? vcpu_run+0x26e/0x740 [ 1298.097820][T24227] ? kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1298.103438][T24227] ? kvm_vcpu_ioctl+0x565/0x950 [ 1298.108273][T24227] ? __se_sys_ioctl+0xcb/0x140 [ 1298.113021][T24227] ? __x64_sys_ioctl+0x3f/0x50 [ 1298.117820][T24227] ? do_syscall_64+0x39/0x80 [ 1298.122414][T24227] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1298.128474][T24227] kcsan_setup_watchpoint+0x41e/0x4a0 [ 1298.133829][T24227] ? kvm_mmu_topup_memory_cache+0xfb/0x140 [ 1298.139619][T24227] direct_page_fault+0x1c6/0x740 [ 1298.144545][T24227] ? kvm_mtrr_check_gfn_range_consistency+0x34f/0x3e0 [ 1298.151290][T24227] kvm_tdp_page_fault+0x92/0xa0 [ 1298.156126][T24227] kvm_mmu_page_fault+0xca/0x410 [ 1298.161048][T24227] handle_ept_violation+0x2bf/0x660 [ 1298.166233][T24227] ? handle_desc+0x60/0x60 [ 1298.170694][T24227] vmx_handle_exit+0x558/0xc30 [ 1298.175444][T24227] vcpu_enter_guest+0x1ada/0x2660 [ 1298.180458][T24227] vcpu_run+0x26e/0x740 [ 1298.184601][T24227] kvm_arch_vcpu_ioctl_run+0x38d/0x6a0 [ 1298.190044][T24227] kvm_vcpu_ioctl+0x565/0x950 [ 1298.194792][T24227] ? tomoyo_file_ioctl+0x1c/0x20 [ 1298.199769][T24227] ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0 [ 1298.205646][T24227] __se_sys_ioctl+0xcb/0x140 [ 1298.210233][T24227] __x64_sys_ioctl+0x3f/0x50 [ 1298.214860][T24227] do_syscall_64+0x39/0x80 [ 1298.219263][T24227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1298.225139][T24227] RIP: 0033:0x45de59 [ 1298.229022][T24227] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1298.248609][T24227] RSP: 002b:00007f3985b9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1298.257004][T24227] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 1298.264961][T24227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1298.272920][T24227] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 1298.280876][T24227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 1298.288836][T24227] R13: 00007fff94d4b87f R14: 00007f3985b9b9c0 R15: 000000000118bf2c [ 1298.298281][T24227] Kernel Offset: disabled [ 1298.302600][T24227] Rebooting in 86400 seconds..