program: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0xeeef0000, 0x1000, 0x1}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000080)="9e93410a6b457967cf960b4b95b1a0b593cb8b8daca5caee928a457b2453e5732d"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x9, 0x3, 0x7, &(0x7f0000000100)=""/16}) (async) syz_usb_connect(0x2, 0x458, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x94, 0x4c, 0x3e, 0x8, 0x46d, 0x8c6, 0x2996, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x446, 0x1, 0x4, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0x13, 0x7, 0x10, 0x1, 0x1, 0x46, 0x4, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x8, 0x7, 0x2f}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x1d, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x97, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x3, 0x9}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x3, 0xf4, 0xc, [@generic={0x50, 0x23, "9b761161c7a4a1ed4560ff66900831133258879488732c75468d7d9187c6c983402aa422b917fb1730cee2961a97b1e351c6bbcc30a9b58124c4acdbebb433b5c2c76885f037d5830a0d12738ed1"}, @generic={0x13, 0x29, "e1f937b7a5914be352c03d14f323c9629a"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x2, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x7}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x4, 0x2, 0xf3, [@generic={0xc7, 0xa, "fd3b457e96ea8a4ab54e07717c97b5d0919bc62bd696c784d09095c69e8745fec83f8adcc3b87b5954e9a199f055aff431bc269ca1013828efa1bf59a8e1e6c7c11d8ed6c7e7bd2965f18d7d7d4c85293479801c24049330ade7c5677003c76ac4141ad1c8cd1205e0c9447c95134f25006e81c9c6f4895da2ff12653a718635b2e6b2b74741436fc8341fb34799e972527a067a502a30f8facf8c6c72af70a6cd83bc37b12f8b3f59f1577cd4968d0243323df1ad4152c8596f481d480e5f817623c48d7c"}]}}, {{0x9, 0x5, 0x5, 0x14, 0x400, 0x7, 0x8, 0x9, [@generic={0x7e, 0x9, "04201f87db7ff477b1386d6bf0119e63aed7e1916a23b8079ff14659abb74e2f569ef5da3602263626e434add3950bb474be5dafca4d4df282862a3fab3438fe05a3e07029ea6acc72aad9131d4d1d17119ebd8e38c3a4244e0dc55f83ec80c6b69a1b6dc7765fb52d7aca0dff67a47146b34b1b661ad39580e212fa"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x10, 0xc, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x44, 0xf7, [@generic={0x44, 0xd, "ccd682de429d19ce2de755f708a95982973c0663b4faf1b04732eff5373150dd4df16cee9889f8fbf111a76c691a76b48af71ff90605958def3f31bbb6cfc80b91e1"}, @generic={0xb, 0xe, "5bdb3aa0f6b3b0cd83"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x6, 0x3, 0x7, [@generic={0xac, 0xa, "22149fbd3a35d73eff0135b93bae9b55dba959df35c7a9198f3a4151ba8b5f2c2a6f1334b04e09d0a25f948b5b490e363515bd0c98047d47f150f4a6a0a4c7ec7502db79e9a2ac189cd50abed6b303bec576cc266a01b1edbaffa797784a896d68e8687a084dc85bacf2ed040fba705730003e0c2e63a99408ff698000d2b321c55e1d60a6203c0e87b71927e012bde3859b115217f291c31a3cafb11ceb9107fb82aaa141d43b2fa497"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x52, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x7, 0xbb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x40}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x8, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x5, 0x0, 0x5, [@generic={0xc2, 0x3, "68573d50556b7e5f64d8bab5c668a07f06a5f7b2cbf2edaabab74c87fb3a370ecb1bacd4a4c35fc282ca767f6777246779a938c7c0f4d28e69ca14af45834a0e1115bc54107ad4431513f7026164d7b01ce21683d5c00f8ed2decc9d65018952a8c283c81f5b08e4ae51c6ace9af106a6ab834d8356b19aab829f121c19013dcf87ec8a098754fa628d9956bb3760f018b295ca0c6b9c918687db1d2c1fdff06d937c4591e1102a33d9238d3734b801153d6102728857d8d7a3b4def8c4366f4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x2, 0xfa, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x2}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x0, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xf2}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x4, 0xf, 0x9d, 0x40, 0x2}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000740)) (async) syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x3, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "4b96"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x2a}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe81f, 0x80, 0x8001}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfe, 0xff, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x25, 0x6}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0x7, 0x3, 0x8, 0x20, 0x6}, 0x1d, &(0x7f0000000880)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0xf, 0x4, [0xf, 0xf, 0x0]}]}, 0x2, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xb6, &(0x7f0000000900)=@string={0xb6, 0x3, "a63d8995a9d176e7d2c4aeb9108473ee18bf921f49e6d25d9bd88f4e882ab326c4a9a0a63507a0a49f4edc56e5d46b8d73c2b140f1eb84303fdff019e9d7b5bdd3f6460ba8e4fe0ac96276737f7fef26bc5b8e9d24b67ea1b82a12dfc845785ee1a6fed08f5f92e78f3aa490f98728ef6d2eb210027ef4123086472d2f35312e6530d0f34e7c7ec04e66e675a95bd73b3110c15167e16c3e7e31d4b7455a635f2646265f9ad3cab03c916ab46d8705e040f69b0e"}}]}) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xa7e, 0x4f, 0x1, {0x22, 0xb8}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0x2, 0x7, 0x31}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x0, 0x4, 0x30, 0xff, 0x7f}, 0x61, &(0x7f0000000a80)={0x5, 0xf, 0x61, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1e, 0x0, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x9d, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x2, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "60354b59896fe91a15e1dbd0ccd7f38b"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "952202d8fca9c325dc03d95bc6d2d916"}, @ss_container_id={0x14, 0x10, 0x4, 0x8f, "e921bde41e4088dc4bfd3f30161a23dd"}]}, 0x1, [{0x27, &(0x7f0000000b00)=@string={0x27, 0x3, "3ed5e6ffe8de9b7ee69c4a489d5c4d13cf9c19e7e5a3d25e127943ebf38dc7da77ebfbefa8"}}]}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x2000, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000bc0)=@lsa={0x0, 0x3}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000c00), 0x10000) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000c40)) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c80), 0x101002, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x5393, &(0x7f0000000e40)={"0f4b1e9637ccc38a369ddba1", &(0x7f0000000cc0)="8c96ce1950798a901ee554fe576b45021b99f35d24900bb5be7c014cb6d3ea8b1a5b8135ed16a4f028d0437b324acb09a0e8bb2ef094dd4119aa8eab0f6803bf3905a69b41cdde73cb8dcf3646cec7506808cc9d11a25ac427c2ad4882715cd45fcd95c5931da7d9d56fbed8023f829fae23725dda04e0cb606e2e3aaacacca37fcb810d9fc5ce928581acb36a30b998a322c4e966c10012e2f57ea9a4608413c135d34b7fdd3ce0de737461c04a0c742d57146db821caaf1b1a2ab2f1d157007fa9c36a5db566fd53c51d2ac376d05692b4ec756664bb63f27226593159d838ee6173d7dbe30d6404fcefdee30805a9c6b3d28a32d3181ffa", 0xf9, 0xf5, &(0x7f0000000dc0)={0x6f, 0x0, 0x42, 0x4, 0x0, 0x1, 0x0, "ac1e317d", 0x6, "c1627d36", 0x1, 0x40, 0x1, "ec5b0e", "9d662ff67a81d8dc126434a1a2ace5d7b0fc63c68b156afdb98478aabc96744e00f90143e7d05bc6f896f4eae38d"}, 0x0, 0x0, 0x9, &(0x7f0000000e00)}) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000e80), 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r6, {0x4, 0x71}}, './file0\x00'}) (async) syz_usb_connect$cdc_ncm(0x1, 0x82, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x6, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Wl'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x733, 0x100, 0x511d, 0x9}, {0x6, 0x24, 0x1a, 0xd, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x3, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xe7, 0x6, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xec, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xae, 0x5, 0x9}}}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x110, 0x3, 0x2, 0xe, 0x20, 0xe2}, 0xcd, &(0x7f0000001000)={0x5, 0xf, 0xcd, 0x2, [@generic={0xc5, 0x10, 0x4, "193acfa93ca54d9ed5742b63e9c5de1311dd9a9a61eaf78c202ec11f86fd51068912ed0f7cfbf62d2ef40aea88d73398019f800c33887149659fa515a1dc0137455890f8678c3167d46e2184f450ceab316ee98f3463ff5149d7592926860a14a51e92f90729891af596a9385d189ce5a4195390424de45a6c4e7c6998c636e5a17c8cb62fb674bd83bf585fa6f2f8766acd6ab7bc03659abb38277f795493cd70af7b35864814df45b9293957b6928c3667567c6b8ca3d9c7e9741fc0d65b3f5afe"}, @ptm_cap={0x3}]}, 0x2, [{0xe3, &(0x7f0000001100)=@string={0xe3, 0x3, "7fe6c1c3a67b5aafe892f82a75b56414b6c917177f84c79b9a030f7b9d35da860d612e6827195c9690f121c36c4489a876469f1e82ee1b4d286bb6f6039682bd4c784461731c0ef9f217e20e7147ef4bba4bdb5f4d8c69287bda541fda95b422957dc219884038d6e5d9e5a671e6d9ba7cfe7dc34c03e195c5fb8d90db30a6d6b554209ab1f27ccde9ef9a03388332c7aa89af1c399a5adec30336751e2969eba6b10ef8bab448a2e805c85c17afa34f7061a96ab6989cb88ed97e2787d1b89f13c11dc0053eebf5ce620a48d1bc50598607f5c22169cfbcd83ce5504c4c2a11f0"}}, {0x82, &(0x7f0000001200)=@string={0x82, 0x3, "9e9d34e45940c301caaa0aa2e015f24e37b26f9536a8a42e423a16568865d320d74c666ac30abf0ebce6d008aff6c440f232b3b820f761768a982109c47a8a17fb546fad744977d58bffc37439deec57d7ec5f29f392c91a0e036979c998d5d4262f44696aedd627be54c74918be6818ca820761c20ec41f73211785778ab31b"}}]}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) mknodat$loop(r7, &(0x7f0000001300)='./file0\x00', 0x1000, 0x0) (async) syz_usb_connect$uac1(0x5, 0xda, &(0x7f0000001340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x4, 0x50, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9c1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2d, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x70, 0x4, "dd"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x8, 0x3, "80ef4e9bb9c1"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4ae, 0x9, 0x1}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x2, 0x8, 0x0, "9ff4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x83, 0x5, 0xd, {0x7, 0x25, 0x1, 0x0, 0xd, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0xfff, 0x3, "175e"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xcd07, 0x2, 0xc, "64752712cd7d3f"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0xf0, 0x5, "ff5a96d7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3b, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x2, 0x8, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9}}}}}}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x200, 0x9, 0xeb, 0x3, 0x8, 0xfc}, 0x21, &(0x7f0000001480)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0xe, 0xff}, @wireless={0xb, 0x10, 0x1, 0xe, 0x72, 0xff, 0x6, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x81, 0xfe, 0x3383}]}, 0x1, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x426}}]}) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f0000001540)=0x3, 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001580), &(0x7f00000015c0)=0xc) syz_usb_control_io$hid(r3, &(0x7f0000001780)={0x24, &(0x7f0000001600)={0x0, 0x6, 0x18, {0x18, 0x22, "d97352f448bb9f21818d2323bca6fe4a39bb503703ea"}}, &(0x7f0000001640)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "74fb44bcdd48110586c1ac7e4b062b89c91c378ac0308c9ce2d8b6ce033111ca3456807adfa4c68f51227f7a839da7fb9eeb6ccb0b5f0789783caa5176f1aa6925ec7babafd4b5895668e801c49731f830feacfd1138490a93793e4e8ac7811e39b229e4c15dfc20dc5df68c6e0daaeb93e5df5956eae01381f7b6c8b67f96b69ecc132c0fca5773"}}, &(0x7f0000001700)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xa, "11ac"}]}}, &(0x7f0000001740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x80, 0x1, {0x22, 0xa1a}}}}, &(0x7f00000019c0)={0x2c, &(0x7f00000017c0)={0x20, 0x15, 0x28, "8ef1264d683660689a92cc5836a444dcea8d5ed0ea54d5a8d010bbcc3d1ee3e17e950acf7fafb09c"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001840)={0x0, 0x8, 0x1}, &(0x7f0000001880)={0x20, 0x1, 0xbe, "2d63f5c426a2fde95cfc8744c3b57ba186f7b535f139e6b66b069a65a7e3aad2de1aa1c8e99a37660a476c9c5ddfe203caeb8bc18f471fc1ffd77947479bccba413b7ffe552083958ba501d77b49b55c6e48053d7bc9fb3dc5e9443cf14e6b91afd5ad2b1d777fde1c011c4b5315a0931228b222b4260c5356d6f85d68ba33dc117611d41d17951a903314a51150c6982b052de716a1a0caddf702b7467e665762745345c7b10aea37cc7c5bd43e59f09d80d813d0b2f8bf25a983ad3107"}, &(0x7f0000001980)={0x20, 0x3, 0x1, 0x1}}) (async) write(r0, &(0x7f0000001a00)="e73366490825d878a150485afc115d6e7269b9acc8e817810a8dbb2c926e2f21a8e363e45eb3478b4837246f8e283e521df2293187d87ba10893743b9c6a29723cec8f5456b408bbe5bf3521ae1cd5563be2c55d122b8009bab34bff47278cc78d0d73601e7264a785e4", 0x6a) close_range(r6, r6, 0x2) [ 118.821309][ T5320] Bluetooth: hci0: command tx timeout [ 118.903292][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.907315][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.958779][ T5336] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 118.969237][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 118.969257][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.969265][ T5336] Call Trace: [ 118.969269][ T5336] [ 118.969276][ T5336] dump_stack_lvl+0x189/0x250 [ 118.969383][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.969398][ T5336] ? __pfx__printk+0x10/0x10 [ 118.969410][ T5336] ? kernfs_path_from_node+0x2b/0x260 [ 118.969452][ T5336] ? kernfs_path_from_node+0x2b/0x260 [ 118.969465][ T5336] ? kernfs_path_from_node+0x2b/0x260 [ 118.969480][ T5336] ? kernfs_path_from_node+0x216/0x260 [ 118.969496][ T5336] sysfs_create_dir_ns+0x259/0x280 [ 118.969512][ T5336] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.969528][ T5336] ? do_raw_spin_unlock+0x4d/0x240 [ 118.969544][ T5336] kobject_add_internal+0x59f/0xb40 [ 118.969592][ T5336] kobject_init_and_add+0x125/0x190 [ 118.969610][ T5336] ? __pfx_kobject_init_and_add+0x10/0x10 [ 118.969625][ T5336] ? __kasan_kmalloc+0x93/0xb0 [ 118.969639][ T5336] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 118.969652][ T5336] ? lookup_or_create_module_kobject+0x75/0x170 [ 118.969666][ T5336] lookup_or_create_module_kobject+0xe3/0x170 [ 118.969679][ T5336] module_add_driver+0xb9/0x310 [ 118.969696][ T5336] bus_add_driver+0x391/0x640 [ 118.969712][ T5336] driver_register+0x23a/0x320 [ 118.969729][ T5336] usb_gadget_register_driver_owner+0xf9/0x270 [ 118.969750][ T5336] raw_ioctl+0x149a/0x3c90 [ 118.969769][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.969786][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.969802][ T5336] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 118.969818][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.969834][ T5336] ? __pfx_raw_ioctl+0x10/0x10 [ 118.969851][ T5336] ? count_memcg_event_mm+0x92/0x3b0 [ 118.969869][ T5336] ? __lock_acquire+0xaac/0xd20 [ 118.969894][ T5336] ? __fget_files+0x2a/0x420 [ 118.969911][ T5336] ? __fget_files+0x3a0/0x420 [ 118.969924][ T5336] ? __fget_files+0x2a/0x420 [ 118.969940][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 118.969954][ T5336] ? __pfx_raw_ioctl+0x10/0x10 [ 118.969968][ T5336] __se_sys_ioctl+0xf9/0x170 [ 118.969981][ T5336] do_syscall_64+0xf6/0x210 [ 118.970001][ T5336] ? clear_bhb_loop+0x45/0xa0 [ 118.970015][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.970026][ T5336] RIP: 0033:0x7fa531d8e56b [ 118.970038][ T5336] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 118.970048][ T5336] RSP: 002b:00007fa532b46f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.970061][ T5336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa531d8e56b [ 118.970068][ T5336] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 118.970076][ T5336] RBP: 00007fa532b47fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 118.970082][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.970089][ T5336] R13: 00007fa532b46fb0 R14: 0000200000000180 R15: 00007fa5320e0320 [ 118.970105][ T5336] [ 118.970124][ T5336] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 119.137828][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.144408][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.155711][ T5336] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 119.161848][ T5336] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 119.165901][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 119.171144][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.175645][ T5336] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 119.178293][ T5336] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 119.186384][ T5336] RSP: 0018:ffffc9000d3ff840 EFLAGS: 00010002 [ 119.188972][ T5336] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 39116553a5be3800 [ 119.192108][ T5336] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 119.195063][ T5336] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 119.198401][ T5336] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 119.202994][ T5336] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 119.206497][ T5336] FS: 00007fa532b496c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 119.210323][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.213107][ T5336] CR2: 00007fa52e1f4fc8 CR3: 0000000040074000 CR4: 0000000000352ef0 [ 119.216508][ T5336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.219860][ T5336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.223313][ T5336] Call Trace: [ 119.224806][ T5336] [ 119.226067][ T5336] __kasan_check_byte+0x12/0x40 [ 119.228254][ T5336] lock_acquire+0x8d/0x360 [ 119.231124][ T5336] ? kobj_kset_leave+0x163/0x190 [ 119.233719][ T5336] _raw_spin_lock_irqsave+0xa7/0xf0 [ 119.236250][ T5336] ? complete+0x28/0x1b0 [ 119.238417][ T5336] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 119.240995][ T5336] ? kobject_init_and_add+0x125/0x190 [ 119.243310][ T5336] complete+0x28/0x1b0 [ 119.245112][ T5336] kobject_put+0x228/0x480 [ 119.246916][ T5336] lookup_or_create_module_kobject+0x150/0x170 [ 119.249368][ T5336] module_add_driver+0xb9/0x310 [ 119.251315][ T5336] bus_add_driver+0x391/0x640 [ 119.253240][ T5336] driver_register+0x23a/0x320 [ 119.255178][ T5336] usb_gadget_register_driver_owner+0xf9/0x270 [ 119.257549][ T5336] raw_ioctl+0x149a/0x3c90 [ 119.259454][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.262205][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.264526][ T5336] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 119.267403][ T5336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.269822][ T5336] ? __pfx_raw_ioctl+0x10/0x10 [ 119.271834][ T5336] ? count_memcg_event_mm+0x92/0x3b0 [ 119.274044][ T5336] ? __lock_acquire+0xaac/0xd20 [ 119.276145][ T5336] ? __fget_files+0x2a/0x420 [ 119.278122][ T5336] ? __fget_files+0x3a0/0x420 [ 119.280119][ T5336] ? __fget_files+0x2a/0x420 [ 119.282092][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.284240][ T5336] ? __pfx_raw_ioctl+0x10/0x10 [ 119.286417][ T5336] __se_sys_ioctl+0xf9/0x170 [ 119.288414][ T5336] do_syscall_64+0xf6/0x210 [ 119.290447][ T5336] ? clear_bhb_loop+0x45/0xa0 [ 119.292523][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.295024][ T5336] RIP: 0033:0x7fa531d8e56b [ 119.296665][ T5336] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 119.303493][ T5336] RSP: 002b:00007fa532b46f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.306964][ T5336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa531d8e56b [ 119.310180][ T5336] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 119.313459][ T5336] RBP: 00007fa532b47fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 119.316716][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.320013][ T5336] R13: 00007fa532b46fb0 R14: 0000200000000180 R15: 00007fa5320e0320 [ 119.323414][ T5336] [ 119.324612][ T5336] Modules linked in: [ 119.325939][ T5336] ---[ end trace 0000000000000000 ]--- [ 119.327694][ T5336] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 119.330234][ T5336] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 119.338570][ T5336] RSP: 0018:ffffc9000d3ff840 EFLAGS: 00010002 [ 119.341073][ T5336] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 39116553a5be3800 [ 119.344337][ T5336] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 119.347910][ T5336] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 119.351733][ T5336] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 119.355225][ T5336] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 119.358795][ T5336] FS: 00007fa532b496c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 119.362603][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.365440][ T5336] CR2: 00007fa52e1f4fc8 CR3: 0000000040074000 CR4: 0000000000352ef0 [ 119.368807][ T5336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.372149][ T5336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.375555][ T5336] Kernel panic - not syncing: Fatal exception [ 119.378304][ T5336] Kernel Offset: disabled [ 119.380015][ T5336] Rebooting in 86400 seconds..