x0, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) [ 1035.599009][T17183] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1035.643191][T22389] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:28 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r7, 0x0, 0xffffffffffff3307, 0x100}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:27:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x206202, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r1, 0x0, &(0x7f00000001c0)="81e692a0c35b4abc93c107eecbf0903e3dbd7c08c44b09cae7", 0x19, 0x10000000}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r6, 0x0, 0x1, 0x0, 0x100000001, 0x2}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) accept(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/172, 0x13}, {&(0x7f0000001140)=""/4083, 0x1000}, {&(0x7f0000002180)=""/4094, 0x1000}], 0x3, 0x9, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r2, &(0x7f0000000200), 0x7) [ 1035.863520][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1035.866313][T22398] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1035.892680][T22401] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1035.984292][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1036.004985][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1036.034155][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1036.068771][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1036.083459][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1036.105635][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x500, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:29 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:29 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x206202, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r1, 0x0, &(0x7f00000001c0)="81e692a0c35b4abc93c107eecbf0903e3dbd7c08c44b09cae7", 0x19, 0x10000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r6, 0x0, 0x1, 0x0, 0x100000001, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) accept(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/172, 0x13}, {&(0x7f0000001140)=""/4083, 0x1000}, {&(0x7f0000002180)=""/4094, 0x1000}], 0x3, 0x9, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r2, &(0x7f0000000200), 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) accept(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) (async) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/172, 0x13}, {&(0x7f0000001140)=""/4083, 0x1000}, {&(0x7f0000002180)=""/4094, 0x1000}], 0x3, 0x9, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendfile(r1, r2, &(0x7f0000000200), 0x7) (async) 13:27:29 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) [ 1036.404306][T17183] usb 5-1: usb_control_msg returned -32 [ 1036.413099][T17183] usbtmc 5-1:16.0: can't read capabilities 13:27:29 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x220a29dcb6d30fef, 0x4, 0xb0, {0xb0, 0xc, "24d3dde6957b6daac7abb832f438474095e1266b43f4f6be8546957d7b90f229226cbf4de38e6b111de37946080444f7ff5d5c1418db41332564d998cadcd15ed185c39f9c639158cbbf798ecd6d080f0dfed3f06748badaf597683f7c6b878c0a6713aeb3a5158b61a105635493f8673039e61e9d9ff4b79ef1721cd1f3db45dd807ba5d3c8ebfcf1b710cacc0c243e8eff998ea142cfad5a92eb399f50f07234d1379d4a0f48a480fa407ec1bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000200)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x80, 0xee, 0x400, 0xe1}, @ptm_cap={0x3}, @generic={0xf7, 0x10, 0x2, "2e4dde3efa43d2b8ff9a75bc95f9c119696dff87033715a0423da60d76f5d0e038352ccafefd792613647dd891b52a80d129e4c3bc771ee896ac53f1e88c45b7a5a42e25552bc02fcbb40f5253d4e8c182330e492b6b9ca76765a9e8b5c529105f5f7734cd580fb0afa69652fb92524fd5772498166fce23f50332e8bb59ed96b9f3d8da834103adde8574f8eb558a7f24f3ae0e1857b444c1e8c3870f2b6572e74140ce32f1368fb4bf0498ac44a05d3a57ea1620e77e1a7b2dd1643b97c16dfda5c0e8778c10e6da5f906a7a6231eabb76e41b5a21e022607148fd95bc09fd375b17d5e5da957160e25f282e8134fdbc142ca6"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x1, 0x1, "e8d1ab7d", "fad21d61"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x8, 0xff, 0x0, 0xea, 0x2, 0x4}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x9a, "13ed763561da58fc7736cf5fb1643ecc94e3545a4e4aeecca5a25e889f40114492e47c80263f14b467cdc145a1cb6930e228cebc803fd0514863066a3598130e269de18d77781e6f01bd94a007a7e1b7393819ea351191875f60b988b9e820e4234340b41a66a4a7cbbc12601390895c4be104ef9222a990aeb5eb238b3acf372cff0a27d89b5851b6097c6e666af77d2916d7ff47d88521be76"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0xe5d3c3e822be5072}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "7116"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="d593e743c57f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "c21f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x84}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1f}}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) semget$private(0x0, 0x1, 0x0) [ 1036.490749][T17183] usb 5-1: USB disconnect, device number 10 [ 1036.564570][T22417] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) accept(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/172, 0x13}, {&(0x7f0000001140)=""/4083, 0x1000}, {&(0x7f0000002180)=""/4094, 0x1000}], 0x3, 0x9, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64) sendfile(r1, r2, &(0x7f0000000200), 0x7) (rerun: 64) 13:27:29 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8140, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) [ 1036.719206][T22419] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:29 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) dup(0xffffffffffffffff) [ 1036.864466][T22435] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1036.921684][T22435] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1036.973477][T17183] usb 5-1: new high-speed USB device number 11 using dummy_hcd 13:27:29 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) dup(0xffffffffffffffff) 13:27:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x700, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:29 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xffffffb7, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff20, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r7}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3}) r8 = dup(r4) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000540)={0xc}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f00000002c0)={0x38, 0x2, r14}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) [ 1037.149322][T22443] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) dup(0xffffffffffffffff) 13:27:30 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) [ 1037.204733][T22447] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1037.243798][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1037.373762][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 13:27:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000001c0)=""/175, 0xaf}], 0x2, 0x9, 0xfffff630) [ 1037.420205][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1037.447380][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1037.485915][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.543796][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1037.552947][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.573975][T22459] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1037.622338][T22465] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1037.859459][T22426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.877463][T17183] usb 5-1: usb_control_msg returned -32 [ 1037.906265][T22426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.923275][T17183] usbtmc 5-1:16.0: can't read capabilities [ 1038.183407][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.192636][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.201837][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.211037][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.220225][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.229400][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.238588][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.247786][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.256924][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.266030][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.275164][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.284278][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.293424][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.302634][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.311739][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.320897][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1038.344162][T17191] usb 5-1: USB disconnect, device number 11 13:27:31 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x220a29dcb6d30fef, 0x4, 0xb0, {0xb0, 0xc, "24d3dde6957b6daac7abb832f438474095e1266b43f4f6be8546957d7b90f229226cbf4de38e6b111de37946080444f7ff5d5c1418db41332564d998cadcd15ed185c39f9c639158cbbf798ecd6d080f0dfed3f06748badaf597683f7c6b878c0a6713aeb3a5158b61a105635493f8673039e61e9d9ff4b79ef1721cd1f3db45dd807ba5d3c8ebfcf1b710cacc0c243e8eff998ea142cfad5a92eb399f50f07234d1379d4a0f48a480fa407ec1bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000200)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x80, 0xee, 0x400, 0xe1}, @ptm_cap={0x3}, @generic={0xf7, 0x10, 0x2, "2e4dde3efa43d2b8ff9a75bc95f9c119696dff87033715a0423da60d76f5d0e038352ccafefd792613647dd891b52a80d129e4c3bc771ee896ac53f1e88c45b7a5a42e25552bc02fcbb40f5253d4e8c182330e492b6b9ca76765a9e8b5c529105f5f7734cd580fb0afa69652fb92524fd5772498166fce23f50332e8bb59ed96b9f3d8da834103adde8574f8eb558a7f24f3ae0e1857b444c1e8c3870f2b6572e74140ce32f1368fb4bf0498ac44a05d3a57ea1620e77e1a7b2dd1643b97c16dfda5c0e8778c10e6da5f906a7a6231eabb76e41b5a21e022607148fd95bc09fd375b17d5e5da957160e25f282e8134fdbc142ca6"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x1, 0x1, "e8d1ab7d", "fad21d61"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x8, 0xff, 0x0, 0xea, 0x2, 0x4}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x9a, "13ed763561da58fc7736cf5fb1643ecc94e3545a4e4aeecca5a25e889f40114492e47c80263f14b467cdc145a1cb6930e228cebc803fd0514863066a3598130e269de18d77781e6f01bd94a007a7e1b7393819ea351191875f60b988b9e820e4234340b41a66a4a7cbbc12601390895c4be104ef9222a990aeb5eb238b3acf372cff0a27d89b5851b6097c6e666af77d2916d7ff47d88521be76"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0xe5d3c3e822be5072}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "7116"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="d593e743c57f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "c21f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x84}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1f}}) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x220a29dcb6d30fef, 0x4, 0xb0, {0xb0, 0xc, "24d3dde6957b6daac7abb832f438474095e1266b43f4f6be8546957d7b90f229226cbf4de38e6b111de37946080444f7ff5d5c1418db41332564d998cadcd15ed185c39f9c639158cbbf798ecd6d080f0dfed3f06748badaf597683f7c6b878c0a6713aeb3a5158b61a105635493f8673039e61e9d9ff4b79ef1721cd1f3db45dd807ba5d3c8ebfcf1b710cacc0c243e8eff998ea142cfad5a92eb399f50f07234d1379d4a0f48a480fa407ec1bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000200)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x80, 0xee, 0x400, 0xe1}, @ptm_cap={0x3}, @generic={0xf7, 0x10, 0x2, "2e4dde3efa43d2b8ff9a75bc95f9c119696dff87033715a0423da60d76f5d0e038352ccafefd792613647dd891b52a80d129e4c3bc771ee896ac53f1e88c45b7a5a42e25552bc02fcbb40f5253d4e8c182330e492b6b9ca76765a9e8b5c529105f5f7734cd580fb0afa69652fb92524fd5772498166fce23f50332e8bb59ed96b9f3d8da834103adde8574f8eb558a7f24f3ae0e1857b444c1e8c3870f2b6572e74140ce32f1368fb4bf0498ac44a05d3a57ea1620e77e1a7b2dd1643b97c16dfda5c0e8778c10e6da5f906a7a6231eabb76e41b5a21e022607148fd95bc09fd375b17d5e5da957160e25f282e8134fdbc142ca6"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x1, 0x1, "e8d1ab7d", "fad21d61"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x8, 0xff, 0x0, 0xea, 0x2, 0x4}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x9a, "13ed763561da58fc7736cf5fb1643ecc94e3545a4e4aeecca5a25e889f40114492e47c80263f14b467cdc145a1cb6930e228cebc803fd0514863066a3598130e269de18d77781e6f01bd94a007a7e1b7393819ea351191875f60b988b9e820e4234340b41a66a4a7cbbc12601390895c4be104ef9222a990aeb5eb238b3acf372cff0a27d89b5851b6097c6e666af77d2916d7ff47d88521be76"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0xe5d3c3e822be5072}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "7116"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="d593e743c57f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "c21f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x84}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1f}}) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) semget$private(0x0, 0x1, 0x0) 13:27:31 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x685c03, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r7, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffa}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) dup(r10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r12, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r12, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r12}) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, &(0x7f0000000380)={0x8, r13}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$IOMMU_DESTROY$device(r14, 0x3b80, &(0x7f00000001c0)={0x8, r13}) 13:27:31 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000001c0)=""/175, 0xaf}], 0x2, 0x9, 0xfffff630) 13:27:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xa00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:31 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xffffffb7}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xffffffb7, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000, 0x4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff20}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff20, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r7}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3}) r8 = dup(r4) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000540)={0xc}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f00000002c0)={0x38, 0x2, r14}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) 13:27:31 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000001c0)=""/175, 0xaf}], 0x2, 0x9, 0xfffff630) [ 1038.958823][T22476] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:31 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x685c03, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:31 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0xc}, 0x18) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x8}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x1ff, 0x3ff, 0x5}) preadv(r0, &(0x7f0000002140), 0x57, 0x1, 0x0) [ 1039.050142][T22482] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1039.106924][T22486] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:27:32 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x685c03, 0x0) fcntl$dupfd(r3, 0x0, r3) (async) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:32 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xffffffb7, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000, 0x4}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff20, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r7}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3}) (async) r8 = dup(r4) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) (async, rerun: 32) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000540)={0xc}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f00000002c0)={0x38, 0x2, r14}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) [ 1039.223608][T17183] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1039.274683][T22482] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1039.368248][T22496] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:27:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0xc}, 0x18) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0xc}, 0x18) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x8}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x1ff, 0x3ff, 0x5}) preadv(r0, &(0x7f0000002140), 0x57, 0x1, 0x0) [ 1039.464282][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1039.584012][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1039.627305][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1039.648039][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.680915][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.702820][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1039.712201][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.013615][T17183] usb 5-1: usb_control_msg returned -32 [ 1040.019264][T17183] usbtmc 5-1:16.0: can't read capabilities [ 1040.350047][T22475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.360791][T22475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.603448][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.612629][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.621823][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.631038][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.640245][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.649391][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.658514][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.667664][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.676806][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.685933][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.695042][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.704151][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.713256][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.722373][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.731475][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1040.740601][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:27:34 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x220a29dcb6d30fef, 0x4, 0xb0, {0xb0, 0xc, "24d3dde6957b6daac7abb832f438474095e1266b43f4f6be8546957d7b90f229226cbf4de38e6b111de37946080444f7ff5d5c1418db41332564d998cadcd15ed185c39f9c639158cbbf798ecd6d080f0dfed3f06748badaf597683f7c6b878c0a6713aeb3a5158b61a105635493f8673039e61e9d9ff4b79ef1721cd1f3db45dd807ba5d3c8ebfcf1b710cacc0c243e8eff998ea142cfad5a92eb399f50f07234d1379d4a0f48a480fa407ec1bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000200)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x80, 0xee, 0x400, 0xe1}, @ptm_cap={0x3}, @generic={0xf7, 0x10, 0x2, "2e4dde3efa43d2b8ff9a75bc95f9c119696dff87033715a0423da60d76f5d0e038352ccafefd792613647dd891b52a80d129e4c3bc771ee896ac53f1e88c45b7a5a42e25552bc02fcbb40f5253d4e8c182330e492b6b9ca76765a9e8b5c529105f5f7734cd580fb0afa69652fb92524fd5772498166fce23f50332e8bb59ed96b9f3d8da834103adde8574f8eb558a7f24f3ae0e1857b444c1e8c3870f2b6572e74140ce32f1368fb4bf0498ac44a05d3a57ea1620e77e1a7b2dd1643b97c16dfda5c0e8778c10e6da5f906a7a6231eabb76e41b5a21e022607148fd95bc09fd375b17d5e5da957160e25f282e8134fdbc142ca6"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x1, 0x1, "e8d1ab7d", "fad21d61"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x8, 0xff, 0x0, 0xea, 0x2, 0x4}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x9a, "13ed763561da58fc7736cf5fb1643ecc94e3545a4e4aeecca5a25e889f40114492e47c80263f14b467cdc145a1cb6930e228cebc803fd0514863066a3598130e269de18d77781e6f01bd94a007a7e1b7393819ea351191875f60b988b9e820e4234340b41a66a4a7cbbc12601390895c4be104ef9222a990aeb5eb238b3acf372cff0a27d89b5851b6097c6e666af77d2916d7ff47d88521be76"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0xe5d3c3e822be5072}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "7116"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="d593e743c57f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "c21f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x84}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1f}}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r4, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:27:34 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x8, r8, 0x0, 0x1, 0x72, &(0x7f00000001c0)="beece74f20575d8937a1012357736599751165bf172520c56ec53ea2cc93b7894c5ea678e2f457a436335112d4c40b3a5a48ea553f517b65c76ec34f2c15d875fa2f5005732f5ed4c51b1e8f259449de669c2270d8975f9889809cb518dda548dc2ea0f1381e811b4922a5aa630fbed7452f"}) 13:27:34 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x4100) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r4 = dup(0xffffffffffffffff) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r7, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffa}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (rerun: 32) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) dup(r10) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r12, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r12, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r12}) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, &(0x7f0000000380)={0x8, r13}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$IOMMU_DESTROY$device(r14, 0x3b80, &(0x7f00000001c0)={0x8, r13}) 13:27:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0xc}, 0x18) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x8}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x1ff, 0x3ff, 0x5}) preadv(r0, &(0x7f0000002140), 0x57, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0xc}, 0x18) (async) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x8}) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x1ff, 0x3ff, 0x5}) (async) preadv(r0, &(0x7f0000002140), 0x57, 0x1, 0x0) (async) 13:27:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xe00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1041.975365][ T8465] usb 5-1: USB disconnect, device number 12 13:27:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x208202, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x5958b000) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, ')N+'}, {0x20, '#'}, {}], 0xa, "a7ec3a4746c22874eb5e5342405f7d51969b9824c7716d891b32e5a7f296ebd30ce76489659e90e5ac62404c80bf2a1439b78b715dafee"}, 0x4a) 13:27:34 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x4100) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1042.079445][T22517] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:35 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x4100) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x4100) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:27:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x208202, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x5958b000) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, ')N+'}, {0x20, '#'}, {}], 0xa, "a7ec3a4746c22874eb5e5342405f7d51969b9824c7716d891b32e5a7f296ebd30ce76489659e90e5ac62404c80bf2a1439b78b715dafee"}, 0x4a) 13:27:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = dup(0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r7, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffa}) (rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (async, rerun: 64) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) dup(r10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r12, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r12, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r12}) (async, rerun: 32) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, &(0x7f0000000380)={0x8, r13}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$IOMMU_DESTROY$device(r14, 0x3b80, &(0x7f00000001c0)={0x8, r13}) 13:27:35 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x8, r8, 0x0, 0x1, 0x72, &(0x7f00000001c0)="beece74f20575d8937a1012357736599751165bf172520c56ec53ea2cc93b7894c5ea678e2f457a436335112d4c40b3a5a48ea553f517b65c76ec34f2c15d875fa2f5005732f5ed4c51b1e8f259449de669c2270d8975f9889809cb518dda548dc2ea0f1381e811b4922a5aa630fbed7452f"}) [ 1042.543520][ T8465] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1042.566368][T22547] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.612820][T22553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.628941][T22553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.648405][T22553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.801755][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1042.943788][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1042.955499][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1042.966169][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1042.976827][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.990358][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1042.999936][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.247711][T22525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.259580][ T8465] usb 5-1: usb_control_msg returned -32 [ 1043.270688][T22525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.278649][ T8465] usbtmc 5-1:16.0: can't read capabilities [ 1043.323426][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.332594][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.341697][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.350776][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.359852][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.368925][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.378050][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.387250][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.396366][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.405461][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.414540][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.423733][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.432845][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.441953][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.451037][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1043.460137][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:27:36 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffc}}, './file0\x00'}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) dup3(r4, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2bc, 0x16, 0x200, 0x70bd26, 0x25dfdbfe, {0xe}, [@generic="e908719bf03e5f3d68f470f30bd0521ccf212dcb591f07a87e7d4342fae1d34bf1aa654f43b4e785cc2a98c4fdbe6ed80a99095c008a29dec1968c3d133bca6fb55a70de93aa01e43a04499eb94b314da3ef793e", @generic="a8364f647481dc3d3097ed993019b24c63a2f06abdb1a810ed9ba403672fec6022ba80d52da817e54c7aa06200ea89f1978919675bebcb16dc2f62a9bbde14ba3102675484046e474602b5d43cf49ded68903b4a3aae6a8cbd4db6021bc82fe42b6a68a5f0ed8741748d4f034df16a5ee18ede925f58d41e4964b7", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="4b1f6aaee7d2f224d6955955e0bd876ba1500a19651d9eabde1305f636ece1ef33c97acd2737dc6027ddd6bbae16718c4ee2f8fc658c5edada87165ef774b2c7fea44d32fe11b3af7fb7f91b23d81a29ab92e776248038208646c3b61ffa535d485a57558d4938c9661c9a10927276c46ec741916493f10181115ab834f2259633978b52c1a144060690d17a6f9b2e08c6b44020c9bfdcc5f2b5e6eebbfefb4c972d261aaade1d0960dde2552a3c1ec5d3fbe5ee2e7f2491c45a3db7c37077ed95da6b0b42b86d961fc33c5f77a1fc96ea0772bc9ec9aaab6fc713787d6cf11126361b79b692e1712deec3844e822352117f729c3a01", @nested={0xb0, 0x76, 0x0, 0x1, [@generic="3355153f71816bf7a5dd9d324596e0c39f7968ed757a176517311b4e7f7ded1a4db2d88c41c1a0135cab0016babd8c064e2da32fee8903f5d9a328ab7ea412439f5a8aa5f74167372e62600987", @generic="c847a99bca2945210086fbb9fde20d3863e884f7780cc8040b9f147de7ceb5bc457e602c3254ee78ba06a3812e63b523ab2f3602589ec2549ee17ce5ff4c459edb150896049c26da52827cdfbfdee2ef4c806ab88ebd9b", @typed={0x8, 0x2b, 0x0, 0x0, @pid}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x101}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) semget$private(0x0, 0x1, 0x0) 13:27:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x208202, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x5958b000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x5958b000) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, ')N+'}, {0x20, '#'}, {}], 0xa, "a7ec3a4746c22874eb5e5342405f7d51969b9824c7716d891b32e5a7f296ebd30ce76489659e90e5ac62404c80bf2a1439b78b715dafee"}, 0x4a) 13:27:36 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1800, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:36 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) (async) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x8, r8, 0x0, 0x1, 0x72, &(0x7f00000001c0)="beece74f20575d8937a1012357736599751165bf172520c56ec53ea2cc93b7894c5ea678e2f457a436335112d4c40b3a5a48ea553f517b65c76ec34f2c15d875fa2f5005732f5ed4c51b1e8f259449de669c2270d8975f9889809cb518dda548dc2ea0f1381e811b4922a5aa630fbed7452f"}) 13:27:36 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x321000, 0x14) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r1, 0x0, 0x8, 0x8}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x9cb8ee8cecc0d39, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4}) [ 1043.495419][ T4688] usb 5-1: USB disconnect, device number 13 [ 1043.572648][T22561] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1043.612003][T22565] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:27:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x5}, 0x8, 0x0) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1000000000000231, 0x1, 0x0) [ 1043.625542][T22568] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:27:36 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async, rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x5}, 0x8, 0x0) (rerun: 32) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1000000000000231, 0x1, 0x0) 13:27:36 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x321000, 0x14) (rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r1, 0x0, 0x8, 0x8}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) (async, rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x9cb8ee8cecc0d39, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4}) 13:27:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x5}, 0x8, 0x0) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1000000000000231, 0x1, 0x0) [ 1043.959522][T22585] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:36 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000106000018000000", @ANYRES32=r0, @ANYBLOB="00000000030000002e2f66696c653000"]) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x41) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r10, 0x0, 0x7, 0x2}) [ 1044.007219][T22587] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1044.034547][ T4688] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1044.115613][T22594] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1044.293432][ T4688] usb 5-1: Using ep0 maxpacket: 8 [ 1044.420622][ T4688] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1044.432134][ T4688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1044.445790][ T4688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1044.456144][ T4688] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.469281][ T4688] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1044.478770][ T4688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.745590][ T4688] usb 5-1: usb_control_msg returned -32 [ 1044.751240][ T4688] usbtmc 5-1:16.0: can't read capabilities [ 1044.950505][T17191] usb 5-1: USB disconnect, device number 14 [ 1044.956604][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.956704][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.956788][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.956871][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.956952][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957034][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957115][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957196][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957284][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957366][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957447][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957529][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957611][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957692][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957773][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1044.957860][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:27:38 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x321000, 0x14) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r1, 0x0, 0x8, 0x8}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x9cb8ee8cecc0d39, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x321000, 0x14) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r1, 0x0, 0x8, 0x8}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x9cb8ee8cecc0d39, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4}) (async) 13:27:38 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1d8) sendto$inet6(r0, &(0x7f0000000080)="3b555aa2a1bad771f00573f0efc17933b74616cb100df287cdc4bde091029aa4276051b3544231e6df2b622d82f32b31459dd887287c67967e3abb0a5826439f50eef933defc38cac3783fc722be4c13ead8eb2082f72759ebc0697f790db9b633562879b948af5d7c05b08297f8d97fa7d627fd6dbfe5167541395384513609ba4341846c492b701a658a2b8e46ce4b7629c202534b34a43defc07ccc2035530f7318bf8d57ff", 0xa7, 0x2000c000, &(0x7f0000000140)={0xa, 0x4e21, 0x8001, @loopback, 0x1}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/238, 0xee}], 0x1, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000180)="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", 0xfb, 0x10, &(0x7f0000000280)={0xa, 0x4e21, 0x7a2b, @empty, 0x6}, 0x1c) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendto$inet6(r3, &(0x7f0000000580)="9a46defa5117dd7ef54ec0c62ad8ab3edee4427903beef0c618ce5370fe1993530e02fdbd15586c6454c03504d061a26b97ef5663382914b71b17fc65ff801590221cf76655aa5156747b651e50ea5b1f58f48b2f319fc9edf2f70a0081bdb309f957728d0a58a78760043b98caed57fbd36069c297916edcbe710b19d13ae412fb98ed9f72fc2e35b05e0c68c83e51ec44edc4b6f0621be0532135a6fc75d41b0ba41391607fe4f84bb7216", 0xac, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb496}, 0x1c) r4 = socket(0x10, 0x5, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xe}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000849}, 0x40080) 13:27:38 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:27:38 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000106000018000000", @ANYRES32=r0, @ANYBLOB="00000000030000002e2f66696c653000"]) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) (rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x41) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r10, 0x0, 0x7, 0x2}) 13:27:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1f00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1045.556063][T22600] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1045.589199][T22600] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1045.612593][T22601] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:27:38 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1d8) sendto$inet6(r0, &(0x7f0000000080)="3b555aa2a1bad771f00573f0efc17933b74616cb100df287cdc4bde091029aa4276051b3544231e6df2b622d82f32b31459dd887287c67967e3abb0a5826439f50eef933defc38cac3783fc722be4c13ead8eb2082f72759ebc0697f790db9b633562879b948af5d7c05b08297f8d97fa7d627fd6dbfe5167541395384513609ba4341846c492b701a658a2b8e46ce4b7629c202534b34a43defc07ccc2035530f7318bf8d57ff", 0xa7, 0x2000c000, &(0x7f0000000140)={0xa, 0x4e21, 0x8001, @loopback, 0x1}, 0x1c) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/238, 0xee}], 0x1, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000180)="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", 0xfb, 0x10, &(0x7f0000000280)={0xa, 0x4e21, 0x7a2b, @empty, 0x6}, 0x1c) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendto$inet6(r3, &(0x7f0000000580)="9a46defa5117dd7ef54ec0c62ad8ab3edee4427903beef0c618ce5370fe1993530e02fdbd15586c6454c03504d061a26b97ef5663382914b71b17fc65ff801590221cf76655aa5156747b651e50ea5b1f58f48b2f319fc9edf2f70a0081bdb309f957728d0a58a78760043b98caed57fbd36069c297916edcbe710b19d13ae412fb98ed9f72fc2e35b05e0c68c83e51ec44edc4b6f0621be0532135a6fc75d41b0ba41391607fe4f84bb7216", 0xac, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb496}, 0x1c) (async) r4 = socket(0x10, 0x5, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xe}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000849}, 0x40080) [ 1045.656655][T22605] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:27:38 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffc}}, './file0\x00'}) (async, rerun: 64) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) dup3(r4, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2bc, 0x16, 0x200, 0x70bd26, 0x25dfdbfe, {0xe}, [@generic="e908719bf03e5f3d68f470f30bd0521ccf212dcb591f07a87e7d4342fae1d34bf1aa654f43b4e785cc2a98c4fdbe6ed80a99095c008a29dec1968c3d133bca6fb55a70de93aa01e43a04499eb94b314da3ef793e", @generic="a8364f647481dc3d3097ed993019b24c63a2f06abdb1a810ed9ba403672fec6022ba80d52da817e54c7aa06200ea89f1978919675bebcb16dc2f62a9bbde14ba3102675484046e474602b5d43cf49ded68903b4a3aae6a8cbd4db6021bc82fe42b6a68a5f0ed8741748d4f034df16a5ee18ede925f58d41e4964b7", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="4b1f6aaee7d2f224d6955955e0bd876ba1500a19651d9eabde1305f636ece1ef33c97acd2737dc6027ddd6bbae16718c4ee2f8fc658c5edada87165ef774b2c7fea44d32fe11b3af7fb7f91b23d81a29ab92e776248038208646c3b61ffa535d485a57558d4938c9661c9a10927276c46ec741916493f10181115ab834f2259633978b52c1a144060690d17a6f9b2e08c6b44020c9bfdcc5f2b5e6eebbfefb4c972d261aaade1d0960dde2552a3c1ec5d3fbe5ee2e7f2491c45a3db7c37077ed95da6b0b42b86d961fc33c5f77a1fc96ea0772bc9ec9aaab6fc713787d6cf11126361b79b692e1712deec3844e822352117f729c3a01", @nested={0xb0, 0x76, 0x0, 0x1, [@generic="3355153f71816bf7a5dd9d324596e0c39f7968ed757a176517311b4e7f7ded1a4db2d88c41c1a0135cab0016babd8c064e2da32fee8903f5d9a328ab7ea412439f5a8aa5f74167372e62600987", @generic="c847a99bca2945210086fbb9fde20d3863e884f7780cc8040b9f147de7ceb5bc457e602c3254ee78ba06a3812e63b523ab2f3602589ec2549ee17ce5ff4c459edb150896049c26da52827cdfbfdee2ef4c806ab88ebd9b", @typed={0x8, 0x2b, 0x0, 0x0, @pid}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x101}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) semget$private(0x0, 0x1, 0x0) [ 1045.712558][T22601] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:38 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = dup(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{r2}, 0x0, 0x8, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000500000000000001000000000000000080000000000000003100000000000000020000000000000002000000000000000100000000000000050000000000002605000000000000009506000000000000050000000000000001000080000000000000000001000000"]}, @devid}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:38 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80440, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001840)={{}, {}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r10, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r12}) 13:27:38 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000106000018000000", @ANYRES32=r0, @ANYBLOB="00000000030000002e2f66696c653000"]) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x41) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x41) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r10, 0x0, 0x7, 0x2}) 13:27:38 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1d8) sendto$inet6(r0, &(0x7f0000000080)="3b555aa2a1bad771f00573f0efc17933b74616cb100df287cdc4bde091029aa4276051b3544231e6df2b622d82f32b31459dd887287c67967e3abb0a5826439f50eef933defc38cac3783fc722be4c13ead8eb2082f72759ebc0697f790db9b633562879b948af5d7c05b08297f8d97fa7d627fd6dbfe5167541395384513609ba4341846c492b701a658a2b8e46ce4b7629c202534b34a43defc07ccc2035530f7318bf8d57ff", 0xa7, 0x2000c000, &(0x7f0000000140)={0xa, 0x4e21, 0x8001, @loopback, 0x1}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/238, 0xee}], 0x1, 0x2, 0x0) (async) sendto$inet6(r1, &(0x7f0000000180)="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", 0xfb, 0x10, &(0x7f0000000280)={0xa, 0x4e21, 0x7a2b, @empty, 0x6}, 0x1c) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendto$inet6(r3, &(0x7f0000000580)="9a46defa5117dd7ef54ec0c62ad8ab3edee4427903beef0c618ce5370fe1993530e02fdbd15586c6454c03504d061a26b97ef5663382914b71b17fc65ff801590221cf76655aa5156747b651e50ea5b1f58f48b2f319fc9edf2f70a0081bdb309f957728d0a58a78760043b98caed57fbd36069c297916edcbe710b19d13ae412fb98ed9f72fc2e35b05e0c68c83e51ec44edc4b6f0621be0532135a6fc75d41b0ba41391607fe4f84bb7216", 0xac, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb496}, 0x1c) (async) r4 = socket(0x10, 0x5, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xe}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000849}, 0x40080) [ 1045.990460][T22624] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:38 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = dup(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{r2}, 0x0, 0x8, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000500000000000001000000000000000080000000000000003100000000000000020000000000000002000000000000000100000000000000050000000000002605000000000000009506000000000000050000000000000001000080000000000000000001000000"]}, @devid}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1046.071160][T22629] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1046.143981][T22625] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1046.154788][T17191] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1046.182790][T22640] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:27:39 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) r4 = dup(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{r2}, 0x0, 0x8, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000500000000000001000000000000000080000000000000003100000000000000020000000000000002000000000000000100000000000000050000000000002605000000000000009506000000000000050000000000000001000080000000000000000001000000"]}, @devid}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:39 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x0}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x0, 0xff, 0x9, 0xfe01, 0x4}, &(0x7f0000000200)=0x20) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f0000000240)=0xc2, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3c, {{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, {{0xa, 0x4e21, 0xc, @loopback, 0xcfe2}}}, 0x108) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000040)) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x3f00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:39 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80440, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001840)={{}, {}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r10, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r10, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r12}) 13:27:39 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = getpid() getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000003c0)=""/124, &(0x7f0000000440)=0x7c) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000340)={0x2004000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/75, 0x4b, &(0x7f0000000240)=""/153, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2], 0x3, {r0}}, 0x58) [ 1046.393473][T17191] usb 5-1: Using ep0 maxpacket: 8 [ 1046.447125][T22650] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:39 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1046.523881][T17191] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1046.576020][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1046.591595][T22648] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1046.650996][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1046.663971][T22660] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1046.691890][T17191] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.746545][T22663] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1046.761635][T17191] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.795200][T17191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.188148][T17191] usb 5-1: usb_control_msg returned -32 [ 1047.202729][T17191] usbtmc 5-1:16.0: can't read capabilities 13:27:40 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffc}}, './file0\x00'}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) dup3(r4, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2bc, 0x16, 0x200, 0x70bd26, 0x25dfdbfe, {0xe}, [@generic="e908719bf03e5f3d68f470f30bd0521ccf212dcb591f07a87e7d4342fae1d34bf1aa654f43b4e785cc2a98c4fdbe6ed80a99095c008a29dec1968c3d133bca6fb55a70de93aa01e43a04499eb94b314da3ef793e", @generic="a8364f647481dc3d3097ed993019b24c63a2f06abdb1a810ed9ba403672fec6022ba80d52da817e54c7aa06200ea89f1978919675bebcb16dc2f62a9bbde14ba3102675484046e474602b5d43cf49ded68903b4a3aae6a8cbd4db6021bc82fe42b6a68a5f0ed8741748d4f034df16a5ee18ede925f58d41e4964b7", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="4b1f6aaee7d2f224d6955955e0bd876ba1500a19651d9eabde1305f636ece1ef33c97acd2737dc6027ddd6bbae16718c4ee2f8fc658c5edada87165ef774b2c7fea44d32fe11b3af7fb7f91b23d81a29ab92e776248038208646c3b61ffa535d485a57558d4938c9661c9a10927276c46ec741916493f10181115ab834f2259633978b52c1a144060690d17a6f9b2e08c6b44020c9bfdcc5f2b5e6eebbfefb4c972d261aaade1d0960dde2552a3c1ec5d3fbe5ee2e7f2491c45a3db7c37077ed95da6b0b42b86d961fc33c5f77a1fc96ea0772bc9ec9aaab6fc713787d6cf11126361b79b692e1712deec3844e822352117f729c3a01", @nested={0xb0, 0x76, 0x0, 0x1, [@generic="3355153f71816bf7a5dd9d324596e0c39f7968ed757a176517311b4e7f7ded1a4db2d88c41c1a0135cab0016babd8c064e2da32fee8903f5d9a328ab7ea412439f5a8aa5f74167372e62600987", @generic="c847a99bca2945210086fbb9fde20d3863e884f7780cc8040b9f147de7ceb5bc457e602c3254ee78ba06a3812e63b523ab2f3602589ec2549ee17ce5ff4c459edb150896049c26da52827cdfbfdee2ef4c806ab88ebd9b", @typed={0x8, 0x2b, 0x0, 0x0, @pid}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x101}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) semget$private(0x0, 0x1, 0x0) 13:27:40 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x0}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x0, 0xff, 0x9, 0xfe01, 0x4}, &(0x7f0000000200)=0x20) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f0000000240)=0xc2, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3c, {{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, {{0xa, 0x4e21, 0xc, @loopback, 0xcfe2}}}, 0x108) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000040)) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x0, 0xff, 0x9, 0xfe01, 0x4}, &(0x7f0000000200)=0x20) (async) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f0000000240)=0xc2, 0x4) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3c, {{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, {{0xa, 0x4e21, 0xc, @loopback, 0xcfe2}}}, 0x108) (async) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000040)) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) 13:27:40 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80440, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001840)={{}, {}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r10, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r12}) 13:27:40 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x5c00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1047.272022][ T4688] usb 5-1: USB disconnect, device number 15 [ 1047.392698][T22669] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1047.421456][T22673] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1047.475693][T22672] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1047.511765][T22672] CPU: 1 PID: 22672 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1047.522276][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1047.532388][T22672] Call Trace: [ 1047.535740][T22672] [ 1047.538718][T22672] dump_stack_lvl+0x125/0x1b0 [ 1047.543465][T22672] sysfs_warn_dup+0x7f/0xa0 [ 1047.548041][T22672] sysfs_create_dir_ns+0x247/0x2a0 [ 1047.553226][T22672] ? sysfs_create_mount_point+0xb0/0xb0 [ 1047.558844][T22672] ? spin_bug+0x1d0/0x1d0 [ 1047.563258][T22672] ? do_raw_spin_unlock+0x173/0x230 [ 1047.568539][T22672] kobject_add_internal+0x2c8/0x960 [ 1047.573806][T22672] kobject_add+0x16f/0x240 [ 1047.578259][T22672] ? kset_create_and_add+0x190/0x190 [ 1047.583596][T22672] ? kobject_put+0xbe/0x440 [ 1047.588176][T22672] ? bus_get_dev_root+0x5e/0x80 [ 1047.593122][T22672] device_add+0x289/0x1aa0 [ 1047.597593][T22672] ? device_initialize+0x510/0x510 [ 1047.602868][T22672] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1047.609829][T22672] ? __init_waitqueue_head+0xca/0x150 [ 1047.615253][T22672] iommufd_test+0x1c47/0x2e60 [ 1047.619997][T22672] ? reacquire_held_locks+0x4b0/0x4b0 [ 1047.625510][T22672] ? iommufd_selftest_destroy+0x100/0x100 [ 1047.631277][T22672] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1047.636343][T22672] iommufd_fops_ioctl+0x347/0x4d0 [ 1047.641415][T22672] ? iommufd_destroy+0x180/0x180 [ 1047.646432][T22672] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1047.651406][T22672] ? iommufd_destroy+0x180/0x180 [ 1047.656377][T22672] __x64_sys_ioctl+0x18f/0x210 [ 1047.661178][T22672] do_syscall_64+0x38/0xb0 [ 1047.665638][T22672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1047.671563][T22672] RIP: 0033:0x7f69ab27cae9 [ 1047.676008][T22672] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1047.695741][T22672] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.704185][T22672] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1047.712269][T22672] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1047.720270][T22672] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1047.728266][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.736272][T22672] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1047.744294][T22672] 13:27:40 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1047.780429][T22672] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1047.898519][T22693] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:27:40 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x8, r4, 0x0, 0x2, 0x32f6d0, 0x45, &(0x7f00000001c0)="b7a3319cc3dbb615c5e9b8e40881a27d5edced3d86f9e215cc243211808af4422864b63456651f3378b9c8b025d98747102ac0bd542e1a5eb6b2198cd23c4aced2a100d3f4"}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:40 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x0}) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x0, 0xff, 0x9, 0xfe01, 0x4}, &(0x7f0000000200)=0x20) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f0000000240)=0xc2, 0x4) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3c, {{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, {{0xa, 0x4e21, 0xc, @loopback, 0xcfe2}}}, 0x108) (async, rerun: 64) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000040)) (async, rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:40 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1048.143544][ T4688] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1048.177944][T22700] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:41 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x6a00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:41 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r2 = getpid() getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000003c0)=""/124, &(0x7f0000000440)=0x7c) (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x2004000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/75, 0x4b, &(0x7f0000000240)=""/153, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2], 0x3, {r0}}, 0x58) 13:27:41 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1048.315654][T22699] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1048.383811][ T4688] usb 5-1: Using ep0 maxpacket: 8 [ 1048.499344][T22713] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1048.514985][ T4688] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1048.549340][ T4688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1048.569414][ T4688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1048.583035][ T4688] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.620317][ T4688] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1048.661672][ T4688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.973661][ T4688] usb 5-1: usb_control_msg returned -32 [ 1048.979357][ T4688] usbtmc 5-1:16.0: can't read capabilities [ 1049.183453][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.192658][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.201778][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.210887][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.220101][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.229211][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.238319][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.247425][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.256542][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.265665][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.274871][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.283973][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.293077][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.302278][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.311383][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1049.320501][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:27:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "3f5ab8a0efe7e8c07a34f3b32b3950c302f0e231d9ef249a1acbae88dd5c84e96d4ec896079d670e9c5fe766ee92edd89cc4e4b89675e51fd95c3dcf0fad9e72d44a88aed6b1ba850ade5e739eac1f3e52af742c53f58a2afe5ad376d64764279c34cc176b288bed194a410bf100257a50df12c4e4328ba91bb43c2de5db22bf5b4efc7a81"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000140)={0xa00, 0x4b0, 0x40, 0x4b0, 0x1f, 0x778, 0x0, 0x2, {0x4, 0x80, 0x1}, {0x8701, 0x7f, 0x1}, {0x2, 0x200}, {0x1000, 0x7}, 0x2, 0x100, 0x80, 0x2, 0x0, 0x3f, 0x64, 0x287f, 0x8, 0x2, 0x67d, 0x400, 0x8, 0x1, 0x0, 0x3}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000011000000060028000000000008000300", @ANYRES32=r9, @ANYBLOB="c2c286ff0f0000000000000f0a1d1ef0c1"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc63}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) semget$private(0x0, 0x1, 0x0) 13:27:42 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:42 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r8, 0x8}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:42 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x8, r4, 0x0, 0x2, 0x32f6d0, 0x45, &(0x7f00000001c0)="b7a3319cc3dbb615c5e9b8e40881a27d5edced3d86f9e215cc243211808af4422864b63456651f3378b9c8b025d98747102ac0bd542e1a5eb6b2198cd23c4aced2a100d3f4"}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x8, r4, 0x0, 0x2, 0x32f6d0, 0x45, &(0x7f00000001c0)="b7a3319cc3dbb615c5e9b8e40881a27d5edced3d86f9e215cc243211808af4422864b63456651f3378b9c8b025d98747102ac0bd542e1a5eb6b2198cd23c4aced2a100d3f4"}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) 13:27:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x7000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1049.385148][T17183] usb 5-1: USB disconnect, device number 16 [ 1049.512725][T22729] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1049.592926][T22724] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1049.628086][T22732] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' 13:27:42 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r8, 0x8}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r8, 0x8}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:27:42 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x101}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1049.744962][T22732] CPU: 0 PID: 22732 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1049.760899][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1049.771024][T22732] Call Trace: [ 1049.774342][T22732] [ 1049.777316][T22732] dump_stack_lvl+0x125/0x1b0 [ 1049.782049][T22732] sysfs_warn_dup+0x7f/0xa0 [ 1049.786614][T22732] sysfs_create_dir_ns+0x247/0x2a0 [ 1049.794549][T22732] ? sysfs_create_mount_point+0xb0/0xb0 [ 1049.800158][T22732] ? spin_bug+0x1d0/0x1d0 [ 1049.804557][T22732] ? do_raw_spin_unlock+0x173/0x230 [ 1049.809838][T22732] kobject_add_internal+0x2c8/0x960 [ 1049.815105][T22732] kobject_add+0x16f/0x240 [ 1049.819591][T22732] ? kset_create_and_add+0x190/0x190 [ 1049.824938][T22732] ? kobject_put+0xbe/0x440 [ 1049.829504][T22732] ? bus_get_dev_root+0x5e/0x80 [ 1049.834425][T22732] device_add+0x289/0x1aa0 [ 1049.838896][T22732] ? device_initialize+0x510/0x510 [ 1049.844079][T22732] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1049.850993][T22732] ? __init_waitqueue_head+0xca/0x150 [ 1049.856439][T22732] iommufd_test+0x1c47/0x2e60 [ 1049.861179][T22732] ? reacquire_held_locks+0x4b0/0x4b0 [ 1049.866613][T22732] ? iommufd_selftest_destroy+0x100/0x100 [ 1049.872486][T22732] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1049.877583][T22732] iommufd_fops_ioctl+0x347/0x4d0 [ 1049.882669][T22732] ? iommufd_destroy+0x180/0x180 [ 1049.887686][T22732] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1049.892684][T22732] ? iommufd_destroy+0x180/0x180 [ 1049.897685][T22732] __x64_sys_ioctl+0x18f/0x210 [ 1049.900210][T22744] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1049.902483][T22732] do_syscall_64+0x38/0xb0 [ 1049.902522][T22732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1049.919642][T22732] RIP: 0033:0x7f29a6e7cae9 [ 1049.924119][T22732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1049.943781][T22732] RSP: 002b:00007f29a7bfc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.952253][T22732] RAX: ffffffffffffffda RBX: 00007f29a6f9c050 RCX: 00007f29a6e7cae9 [ 1049.960272][T22732] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1049.964000][T17183] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1049.968360][T22732] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1049.968387][T22732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 13:27:42 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = getpid() (async) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000003c0)=""/124, &(0x7f0000000440)=0x7c) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000340)={0x2004000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/75, 0x4b, &(0x7f0000000240)=""/153, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2], 0x3, {r0}}, 0x58) [ 1049.968409][T22732] R13: 000000000000006e R14: 00007f29a6f9c050 R15: 00007f29a70bfa48 [ 1049.968453][T22732] [ 1050.044766][T22745] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1050.087234][T22732] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:27:43 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async, rerun: 32) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r8, 0x8}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:43 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x8, r4, 0x0, 0x2, 0x32f6d0, 0x45, &(0x7f00000001c0)="b7a3319cc3dbb615c5e9b8e40881a27d5edced3d86f9e215cc243211808af4422864b63456651f3378b9c8b025d98747102ac0bd542e1a5eb6b2198cd23c4aced2a100d3f4"}) (rerun: 32) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:43 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x101}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x101}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) [ 1050.348022][T22755] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x7e00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1050.441144][T22755] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1050.457808][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1050.489440][T22755] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1050.573649][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1050.604219][T22761] iommufd_mock iommufd_mock4: Adding to iommu group 0 [ 1050.633251][T22764] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1050.657628][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1050.708546][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1050.765813][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.787212][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1050.811643][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.093705][T17183] usb 5-1: usb_control_msg returned -32 [ 1051.099402][T17183] usbtmc 5-1:16.0: can't read capabilities [ 1051.313456][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.324869][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.334040][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.343180][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.352341][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.361460][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.370581][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.379703][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.388820][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.397935][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.407103][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.416279][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.425468][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.434628][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.443824][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.452962][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1051.487997][T17191] usb 5-1: USB disconnect, device number 17 13:27:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "3f5ab8a0efe7e8c07a34f3b32b3950c302f0e231d9ef249a1acbae88dd5c84e96d4ec896079d670e9c5fe766ee92edd89cc4e4b89675e51fd95c3dcf0fad9e72d44a88aed6b1ba850ade5e739eac1f3e52af742c53f58a2afe5ad376d64764279c34cc176b288bed194a410bf100257a50df12c4e4328ba91bb43c2de5db22bf5b4efc7a81"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "3f5ab8a0efe7e8c07a34f3b32b3950c302f0e231d9ef249a1acbae88dd5c84e96d4ec896079d670e9c5fe766ee92edd89cc4e4b89675e51fd95c3dcf0fad9e72d44a88aed6b1ba850ade5e739eac1f3e52af742c53f58a2afe5ad376d64764279c34cc176b288bed194a410bf100257a50df12c4e4328ba91bb43c2de5db22bf5b4efc7a81"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000140)={0xa00, 0x4b0, 0x40, 0x4b0, 0x1f, 0x778, 0x0, 0x2, {0x4, 0x80, 0x1}, {0x8701, 0x7f, 0x1}, {0x2, 0x200}, {0x1000, 0x7}, 0x2, 0x100, 0x80, 0x2, 0x0, 0x3f, 0x64, 0x287f, 0x8, 0x2, 0x67d, 0x400, 0x8, 0x1, 0x0, 0x3}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000011000000060028000000000008000300", @ANYRES32=r9, @ANYBLOB="c2c286ff0f0000000000000f0a1d1ef0c1"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc63}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) semget$private(0x0, 0x1, 0x0) 13:27:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xe803, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:44 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000380)={0xc, r5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000300)={0x38, 0x1, r3, 0x0, 0x8000000000000000, 0x10b}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x15f, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) pread64(r0, &(0x7f0000000400)=""/229, 0xe5, 0x1f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000500)=0x4) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r10, 0x3b84, &(0x7f00000002c0)={0x20, r11, 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]}) 13:27:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) flock(r1, 0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x6a3, 0x4, 0x1, 0x9, 0x40]}, &(0x7f0000000040)=0x54) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) preadv(r0, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/152, 0x98}], 0x1, 0x1, 0x3) 13:27:44 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x101}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:44 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x3f, r6}) [ 1052.138179][T22781] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) flock(r1, 0x4) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x6a3, 0x4, 0x1, 0x9, 0x40]}, &(0x7f0000000040)=0x54) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/152, 0x98}], 0x1, 0x1, 0x3) [ 1052.183192][T22790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.198262][T22781] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:27:45 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) (async) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x3f, r6}) [ 1052.232837][T22790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.255401][T22793] iommufd_mock iommufd_mock5: Adding to iommu group 2 [ 1052.327340][T22787] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1052.366962][T22799] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1052.367407][T22794] iommufd_mock iommufd_mock4: Adding to iommu group 1 [ 1052.394713][T22799] CPU: 1 PID: 22799 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1052.405214][T22799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1052.415308][T22799] Call Trace: [ 1052.418607][T22799] [ 1052.421556][T22799] dump_stack_lvl+0x125/0x1b0 [ 1052.426268][T22799] sysfs_warn_dup+0x7f/0xa0 [ 1052.430810][T22799] sysfs_create_dir_ns+0x247/0x2a0 [ 1052.435957][T22799] ? sysfs_create_mount_point+0xb0/0xb0 [ 1052.441543][T22799] ? spin_bug+0x1d0/0x1d0 [ 1052.445922][T22799] ? do_raw_spin_unlock+0x173/0x230 [ 1052.451169][T22799] kobject_add_internal+0x2c8/0x960 [ 1052.456415][T22799] kobject_add+0x16f/0x240 [ 1052.460870][T22799] ? kset_create_and_add+0x190/0x190 [ 1052.466198][T22799] ? kobject_put+0xbe/0x440 [ 1052.470744][T22799] ? bus_get_dev_root+0x5e/0x80 [ 1052.475637][T22799] device_add+0x289/0x1aa0 [ 1052.480182][T22799] ? device_initialize+0x510/0x510 [ 1052.485340][T22799] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1052.492236][T22799] ? __init_waitqueue_head+0xca/0x150 [ 1052.497671][T22799] iommufd_test+0x1c47/0x2e60 [ 1052.502420][T22799] ? reacquire_held_locks+0x4b0/0x4b0 [ 1052.507850][T22799] ? iommufd_selftest_destroy+0x100/0x100 [ 1052.513613][T22799] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1052.518681][T22799] iommufd_fops_ioctl+0x347/0x4d0 [ 1052.523782][T22799] ? iommufd_destroy+0x180/0x180 [ 1052.528770][T22799] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1052.533748][T22799] ? iommufd_destroy+0x180/0x180 [ 1052.538727][T22799] __x64_sys_ioctl+0x18f/0x210 [ 1052.543539][T22799] do_syscall_64+0x38/0xb0 [ 1052.547990][T22799] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1052.553918][T22799] RIP: 0033:0x7f69ab27cae9 [ 1052.558360][T22799] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1052.578437][T22799] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.586881][T22799] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1052.594876][T22799] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1052.602873][T22799] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1052.610874][T22799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.618967][T22799] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1052.626984][T22799] [ 1052.650190][T17191] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1052.671773][T22799] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. 13:27:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "3f5ab8a0efe7e8c07a34f3b32b3950c302f0e231d9ef249a1acbae88dd5c84e96d4ec896079d670e9c5fe766ee92edd89cc4e4b89675e51fd95c3dcf0fad9e72d44a88aed6b1ba850ade5e739eac1f3e52af742c53f58a2afe5ad376d64764279c34cc176b288bed194a410bf100257a50df12c4e4328ba91bb43c2de5db22bf5b4efc7a81"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000140)={0xa00, 0x4b0, 0x40, 0x4b0, 0x1f, 0x778, 0x0, 0x2, {0x4, 0x80, 0x1}, {0x8701, 0x7f, 0x1}, {0x2, 0x200}, {0x1000, 0x7}, 0x2, 0x100, 0x80, 0x2, 0x0, 0x3f, 0x64, 0x287f, 0x8, 0x2, 0x67d, 0x400, 0x8, 0x1, 0x0, 0x3}) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r2, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000011000000060028000000000008000300", @ANYRES32=r9, @ANYBLOB="c2c286ff0f0000000000000f0a1d1ef0c1"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc63}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:27:45 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r6, 0x3b83, &(0x7f0000000240)={0x28, 0x10000, r3, r1, 0x2c9ca6, 0x9, 0x8, 0x92854}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r11, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000001}) [ 1052.757880][T22805] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1052.782848][T22799] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:45 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) (async) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) (async, rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x3f, r6}) (rerun: 64) 13:27:45 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000380)={0xc, r5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000300)={0x38, 0x1, r3, 0x0, 0x8000000000000000, 0x10b}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x15f, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) pread64(r0, &(0x7f0000000400)=""/229, 0xe5, 0x1f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000500)=0x4) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r10, 0x3b84, &(0x7f00000002c0)={0x20, r11, 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]}) 13:27:45 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) flock(r1, 0x4) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x6a3, 0x4, 0x1, 0x9, 0x40]}, &(0x7f0000000040)=0x54) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/152, 0x98}], 0x1, 0x1, 0x3) [ 1053.030436][T22814] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xf401, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:45 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x4}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x9, 0x8000000000000001, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000a40)={0x3, 0x100, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x81, 0x5, 0x0, 0x0, 0x1, 0xa}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) write$binfmt_misc(r0, &(0x7f0000000940)={'syz1', "c4145fe51d481fc15586f88b534888aab8b71cc78bf43236a4d8b6f1611459d257058679e1bb9d3767b26be7ea830baccff257903631185d591d82f7f59e7c1ac156f08c226548cc717cad9a56936a9bc02cf3bc1b8c06254b5e2071839c3caec52bc85832888abdc28408239b1952a72e84cfbe57a51725a93ef3c1798186ba5efa565c991a3d6fa091bde07a8c4b048b6c60d7281df2eecb775ef45fd034ab7493406eb25689f1dd2bcfebf35a70b0446943c3ca3f0283df6226933b32b855c3b4fe5d9ccb5c9475a76a5ad701c6589c3d477b"}, 0xd8) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x30, r2, 0x85a75000) pidfd_getfd(r0, r0, 0x0) [ 1053.102326][T22815] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1053.119844][T22816] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1053.169205][T22816] CPU: 0 PID: 22816 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1053.179725][T22816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1053.189827][T22816] Call Trace: [ 1053.193142][T22816] [ 1053.196111][T22816] dump_stack_lvl+0x125/0x1b0 [ 1053.200884][T22816] sysfs_warn_dup+0x7f/0xa0 [ 1053.205456][T22816] sysfs_create_dir_ns+0x247/0x2a0 [ 1053.210724][T22816] ? sysfs_create_mount_point+0xb0/0xb0 [ 1053.216343][T22816] ? spin_bug+0x1d0/0x1d0 [ 1053.220746][T22816] ? do_raw_spin_unlock+0x173/0x230 [ 1053.226017][T22816] kobject_add_internal+0x2c8/0x960 [ 1053.231264][T22816] kobject_add+0x16f/0x240 [ 1053.235712][T22816] ? kset_create_and_add+0x190/0x190 [ 1053.241050][T22816] ? kobject_put+0xbe/0x440 [ 1053.245589][T22816] ? bus_get_dev_root+0x5e/0x80 [ 1053.250479][T22816] device_add+0x289/0x1aa0 [ 1053.254925][T22816] ? device_initialize+0x510/0x510 [ 1053.260098][T22816] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1053.267093][T22816] ? __init_waitqueue_head+0xca/0x150 [ 1053.272504][T22816] iommufd_test+0x1c47/0x2e60 [ 1053.277220][T22816] ? reacquire_held_locks+0x4b0/0x4b0 [ 1053.282760][T22816] ? iommufd_selftest_destroy+0x100/0x100 [ 1053.288518][T22816] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1053.293586][T22816] iommufd_fops_ioctl+0x347/0x4d0 [ 1053.298696][T22816] ? iommufd_destroy+0x180/0x180 [ 1053.303695][T22816] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1053.308672][T22816] ? iommufd_destroy+0x180/0x180 [ 1053.314092][T22816] __x64_sys_ioctl+0x18f/0x210 [ 1053.318890][T22816] do_syscall_64+0x38/0xb0 [ 1053.323342][T22816] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1053.329277][T22816] RIP: 0033:0x7f69ab27cae9 [ 1053.333727][T22816] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1053.353551][T22816] RSP: 002b:00007f69abf080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.362530][T22816] RAX: ffffffffffffffda RBX: 00007f69ab39c050 RCX: 00007f69ab27cae9 [ 1053.370634][T22816] RDX: 0000000020000340 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 1053.378964][T22816] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1053.387072][T22816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.395086][T22816] R13: 000000000000000b R14: 00007f69ab39c050 R15: 00007f69ab4bfa48 [ 1053.403118][T22816] 13:27:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xff00, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1053.484540][T22829] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1053.513652][T17191] usb 5-1: device descriptor read/64, error -71 [ 1053.539030][T22816] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:27:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x4}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x9, 0x8000000000000001, 0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000a40)={0x3, 0x100, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x81, 0x5, 0x0, 0x0, 0x1, 0xa}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) (async) write$binfmt_misc(r0, &(0x7f0000000940)={'syz1', "c4145fe51d481fc15586f88b534888aab8b71cc78bf43236a4d8b6f1611459d257058679e1bb9d3767b26be7ea830baccff257903631185d591d82f7f59e7c1ac156f08c226548cc717cad9a56936a9bc02cf3bc1b8c06254b5e2071839c3caec52bc85832888abdc28408239b1952a72e84cfbe57a51725a93ef3c1798186ba5efa565c991a3d6fa091bde07a8c4b048b6c60d7281df2eecb775ef45fd034ab7493406eb25689f1dd2bcfebf35a70b0446943c3ca3f0283df6226933b32b855c3b4fe5d9ccb5c9475a76a5ad701c6589c3d477b"}, 0xd8) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x30, r2, 0x85a75000) (async) pidfd_getfd(r0, r0, 0x0) 13:27:46 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffeb2, 0x1, r5, 0x0, 0x744, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000001c0)={0x8, r6}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) 13:27:46 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) (async) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_COPY$syz(r6, 0x3b83, &(0x7f0000000240)={0x28, 0x10000, r3, r1, 0x2c9ca6, 0x9, 0x8, 0x92854}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r11, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000001}) 13:27:46 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000380)={0xc, r5}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000300)={0x38, 0x1, r3, 0x0, 0x8000000000000000, 0x10b}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x15f, 0x1}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) pread64(r0, &(0x7f0000000400)=""/229, 0xe5, 0x1f) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000500)=0x4) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r10, 0x3b84, &(0x7f00000002c0)={0x20, r11, 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]}) [ 1053.784240][T22839] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1053.793898][T17191] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1054.054092][T17191] usb 5-1: Using ep0 maxpacket: 8 [ 1054.195150][T17191] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1054.207101][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1054.227528][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1054.246092][T17191] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.261700][T17191] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1054.297222][T17191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:47 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="110100000000000000ee1adbffffffffffffff7f2d00011000000009020000000905050200de7e001009058b1e20b174533acb17e8c11800"/68], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:27:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x4}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x9, 0x8000000000000001, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000a40)={0x3, 0x100, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x81, 0x5, 0x0, 0x0, 0x1, 0xa}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) write$binfmt_misc(r0, &(0x7f0000000940)={'syz1', "c4145fe51d481fc15586f88b534888aab8b71cc78bf43236a4d8b6f1611459d257058679e1bb9d3767b26be7ea830baccff257903631185d591d82f7f59e7c1ac156f08c226548cc717cad9a56936a9bc02cf3bc1b8c06254b5e2071839c3caec52bc85832888abdc28408239b1952a72e84cfbe57a51725a93ef3c1798186ba5efa565c991a3d6fa091bde07a8c4b048b6c60d7281df2eecb775ef45fd034ab7493406eb25689f1dd2bcfebf35a70b0446943c3ca3f0283df6226933b32b855c3b4fe5d9ccb5c9475a76a5ad701c6589c3d477b"}, 0xd8) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x30, r2, 0x85a75000) pidfd_getfd(r0, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x4}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x9, 0x8000000000000001, 0x1}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000a40)={0x3, 0x100, 0x8}) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x81, 0x5, 0x0, 0x0, 0x1, 0xa}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) (async) write$binfmt_misc(r0, &(0x7f0000000940)={'syz1', "c4145fe51d481fc15586f88b534888aab8b71cc78bf43236a4d8b6f1611459d257058679e1bb9d3767b26be7ea830baccff257903631185d591d82f7f59e7c1ac156f08c226548cc717cad9a56936a9bc02cf3bc1b8c06254b5e2071839c3caec52bc85832888abdc28408239b1952a72e84cfbe57a51725a93ef3c1798186ba5efa565c991a3d6fa091bde07a8c4b048b6c60d7281df2eecb775ef45fd034ab7493406eb25689f1dd2bcfebf35a70b0446943c3ca3f0283df6226933b32b855c3b4fe5d9ccb5c9475a76a5ad701c6589c3d477b"}, 0xd8) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x30, r2, 0x85a75000) (async) pidfd_getfd(r0, r0, 0x0) (async) 13:27:47 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_COPY$syz(r6, 0x3b83, &(0x7f0000000240)={0x28, 0x10000, r3, r1, 0x2c9ca6, 0x9, 0x8, 0x92854}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r11, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000001}) 13:27:47 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffeb2, 0x1, r5, 0x0, 0x744, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000001c0)={0x8, r6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) 13:27:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:47 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r2, 0x0, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, &(0x7f00000000c0)={0x8, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1054.577856][T17191] usb 5-1: usb_control_msg returned -32 [ 1054.618793][T17191] usbtmc 5-1:16.0: can't read capabilities [ 1054.661038][T17191] usb 5-1: USB disconnect, device number 19 [ 1054.694475][T22867] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1054.784826][T22872] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1054.826695][T22866] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1054.871049][T22866] CPU: 0 PID: 22866 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1054.881747][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1054.891945][T22866] Call Trace: [ 1054.895273][T22866] [ 1054.898254][T22866] dump_stack_lvl+0x125/0x1b0 [ 1054.902998][T22866] sysfs_warn_dup+0x7f/0xa0 [ 1054.907593][T22866] sysfs_create_dir_ns+0x247/0x2a0 [ 1054.912783][T22866] ? sysfs_create_mount_point+0xb0/0xb0 13:27:47 executing program 3: r0 = socket(0x29, 0x0, 0x643d) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000200)) preadv(r3, &(0x7f0000002140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x1, 0x10001000) [ 1054.918409][T22866] ? spin_bug+0x1d0/0x1d0 [ 1054.922825][T22866] ? do_raw_spin_unlock+0x173/0x230 [ 1054.928101][T22866] kobject_add_internal+0x2c8/0x960 [ 1054.933363][T22866] kobject_add+0x16f/0x240 [ 1054.937842][T22866] ? kset_create_and_add+0x190/0x190 [ 1054.943208][T22866] ? kobject_put+0xbe/0x440 [ 1054.947805][T22866] ? bus_get_dev_root+0x5e/0x80 [ 1054.952738][T22866] device_add+0x289/0x1aa0 [ 1054.957202][T22866] ? device_initialize+0x510/0x510 [ 1054.962369][T22866] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1054.969302][T22866] ? __init_waitqueue_head+0xca/0x150 [ 1054.974739][T22866] iommufd_test+0x1c47/0x2e60 [ 1054.979465][T22866] ? reacquire_held_locks+0x4b0/0x4b0 [ 1054.984896][T22866] ? iommufd_selftest_destroy+0x100/0x100 [ 1054.990662][T22866] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1054.995743][T22866] iommufd_fops_ioctl+0x347/0x4d0 [ 1055.001077][T22866] ? iommufd_destroy+0x180/0x180 [ 1055.006125][T22866] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1055.011113][T22866] ? iommufd_destroy+0x180/0x180 [ 1055.016100][T22866] __x64_sys_ioctl+0x18f/0x210 [ 1055.020915][T22866] do_syscall_64+0x38/0xb0 [ 1055.025366][T22866] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1055.031296][T22866] RIP: 0033:0x7f29a6e7cae9 [ 1055.035743][T22866] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1055.055388][T22866] RSP: 002b:00007f29a7c1d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.063836][T22866] RAX: ffffffffffffffda RBX: 00007f29a6f9bf80 RCX: 00007f29a6e7cae9 [ 1055.071836][T22866] RDX: 0000000020000340 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 1055.079838][T22866] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1055.087843][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.095848][T22866] R13: 000000000000000b R14: 00007f29a6f9bf80 R15: 00007f29a70bfa48 [ 1055.103870][T22866] 13:27:47 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffeb2, 0x1, r5, 0x0, 0x744, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffeb2, 0x1, r5, 0x0, 0x744, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000001c0)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000001c0)={0x8, r6}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) 13:27:47 executing program 3: r0 = socket(0x29, 0x0, 0x643d) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r1}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000200)) preadv(r3, &(0x7f0000002140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x1, 0x10001000) [ 1055.149277][T22866] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:27:48 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x393043, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x41100, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xfdef}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r12, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r13}) [ 1055.297362][T22866] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:48 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r2, 0x0, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, &(0x7f00000000c0)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, &(0x7f00000000c0)={0x8, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1055.357709][T22888] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:48 executing program 3: r0 = socket(0x29, 0x0, 0x643d) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r1}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000200)) (async) preadv(r3, &(0x7f0000002140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x1, 0x10001000) [ 1055.443976][T17191] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1055.644657][T17191] usb 5-1: device descriptor read/64, error -71 [ 1055.652929][T22896] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1055.729932][T22892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1055.923991][T17191] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1056.113459][T17191] usb 5-1: device descriptor read/64, error -71 [ 1056.233872][T17191] usb usb5-port1: attempt power cycle [ 1056.653494][T17191] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1056.753630][T17191] usb 5-1: device descriptor read/8, error -71 [ 1057.023512][T17191] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1057.123607][T17191] usb 5-1: device descriptor read/8, error -71 [ 1057.245086][T17191] usb usb5-port1: unable to enumerate USB device 13:27:50 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="110100000000000000ee1adbffffffffffffff7f2d00011000000009020000000905050200de7e001009058b1e20b174533acb17e8c11800"/68], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="110100000000000000ee1adbffffffffffffff7f2d00011000000009020000000905050200de7e001009058b1e20b174533acb17e8c11800"/68], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) 13:27:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x2000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:50 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:27:50 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r2, 0x0, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r5}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f0000000380)={0x8, r6}) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, &(0x7f00000000c0)={0x8, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:50 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x393043, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x41100, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xfdef}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r12, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000280)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r13}) [ 1057.818083][T22910] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:27:50 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1057.876913][T22913] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1057.899120][T22912] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1057.945978][T22912] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:27:50 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000001c0)={0xc, r4}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1058.131181][T22931] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:51 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1058.233626][ T4688] usb 5-1: new high-speed USB device number 24 using dummy_hcd 13:27:51 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x393043, 0x0) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x41100, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xfdef}) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r12, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000280)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r13}) [ 1058.276165][T22936] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1058.411900][T22944] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1058.433726][ T4688] usb 5-1: device descriptor read/64, error -71 [ 1058.723503][ T4688] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1058.913476][ T4688] usb 5-1: device descriptor read/64, error -71 [ 1059.038929][ T4688] usb usb5-port1: attempt power cycle [ 1059.453442][ T4688] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1059.543592][ T4688] usb 5-1: device descriptor read/8, error -71 [ 1059.807461][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.814249][ T4688] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1059.822026][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.903673][ T4688] usb 5-1: device descriptor read/8, error -71 [ 1060.029711][ T4688] usb usb5-port1: unable to enumerate USB device 13:27:53 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="110100000000000000ee1adbffffffffffffff7f2d00011000000009020000000905050200de7e001009058b1e20b174533acb17e8c11800"/68], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:27:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x880c0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/171, 0xab}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/35, 0x23}, {&(0x7f0000000840)=""/34, 0x22}, {&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000008c0)=""/90, 0x5a}], 0x5, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200383, 0x0) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x27}, &(0x7f00000009c0)=""/46, 0x2e, &(0x7f0000001140)=""/4096, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0xfffffffffffffd7d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2b, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x24000010) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10100, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0xb862, 0x7fffffffffffffff, 0x2, 0x1, 0x8, 0x81c2, 0x1}, {0x5, 0x6, 0x9f, 0x3}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3506, 0x3, 0x3, 0xa9, 0x42, 0x7, 0x80}}, 0xe8) r6 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x8, 0x40000) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000300)) 13:27:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x4000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:53 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:53 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000001c0)={0xc, r4}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) dup(r7) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000001c0)={0xc, r4}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:27:53 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:53 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1061.007947][T22954] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1061.047466][T22957] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:27:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x880c0, 0x0) (async) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/171, 0xab}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/35, 0x23}, {&(0x7f0000000840)=""/34, 0x22}, {&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000008c0)=""/90, 0x5a}], 0x5, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200383, 0x0) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x27}, &(0x7f00000009c0)=""/46, 0x2e, &(0x7f0000001140)=""/4096, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0xfffffffffffffd7d) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2b, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x24000010) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10100, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0xb862, 0x7fffffffffffffff, 0x2, 0x1, 0x8, 0x81c2, 0x1}, {0x5, 0x6, 0x9f, 0x3}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3506, 0x3, 0x3, 0xa9, 0x42, 0x7, 0x80}}, 0xe8) (async) r6 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x8, 0x40000) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000300)) 13:27:53 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:27:53 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000001c0)={0xc, r4}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:27:54 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1061.248028][T22975] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:27:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x880c0, 0x0) (async) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/171, 0xab}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/35, 0x23}, {&(0x7f0000000840)=""/34, 0x22}, {&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000008c0)=""/90, 0x5a}], 0x5, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200383, 0x0) (async) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x27}, &(0x7f00000009c0)=""/46, 0x2e, &(0x7f0000001140)=""/4096, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0xfffffffffffffd7d) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2b, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x24000010) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10100, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0xb862, 0x7fffffffffffffff, 0x2, 0x1, 0x8, 0x81c2, 0x1}, {0x5, 0x6, 0x9f, 0x3}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3506, 0x3, 0x3, 0xa9, 0x42, 0x7, 0x80}}, 0xe8) r6 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x8, 0x40000) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000300)) [ 1061.323559][T17183] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1061.533667][T17183] usb 5-1: device descriptor read/64, error -71 [ 1061.823547][T17183] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1062.013565][T17183] usb 5-1: device descriptor read/64, error -71 [ 1062.134750][T17183] usb usb5-port1: attempt power cycle [ 1062.543516][T17183] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1062.633587][T17183] usb 5-1: device descriptor read/8, error -71 [ 1062.903595][T17183] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1062.999912][T17183] usb 5-1: device descriptor read/8, error -71 [ 1063.123728][T17183] usb usb5-port1: unable to enumerate USB device 13:27:56 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x0, 0x23, 0x63, {0x63, 0x4, "4494547cab7c6b682511cb43b82ceee78306d16de63582b3928cc8193e35b73060fbcc06efa1d31627db3ab2b96ae533ae8cea17612e2b8f3e01b8d8dd5980c847daea845523944b020313f683a9e49c4e71b8228fb4128cdd4133665d64e0d919"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc85, 0xff, 0x1, {0x22, 0x3a0}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0xb5, "f9daa3138b86dc320f9d816e325c069cf089e6270d52ad07e2bf7604e56f4cd7480f983f84252f228a51ca7554362e993748c7f3ddce5d7777d418716291cebd23abae54906bad57bb59459a943c1156ffbbd1b47e9fb6d41c9a50af4d242c2174d55d832754e337a43d1a629dd8dfdf3c03486d5ad3e2b28a995bda581e582ac566f787524ce16e6847f8b0e76ac8002ed5c944dfe068769537685f1c73b2b2e097d36e8163969a77812c1a6dd80fce1cae945020"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xc1, "8329858a7649f587a15633db2bba19fa72b0a9e49622a3e8f7c307c9dc273437eb4709c3f1797ec6649a2d4725997c656c67db8b79c9c32053b6a52eceecdff2edcdb5a1e961b0ed8138cbd57f199f5d03872ab4a0ef1464dc8fa7aba9a6e113960bd71c46defe60927b79dcd0f9a74aa2441fe4dbac66b41d55f98ffa832f40da64a4d73863c5509f263d5b6b02285c2f846d8bf22db9bbfd730f0a4df2f8c197c4d3140c8718271d7ceb7b63ac3605d460d111798f9d08646dba645fb4bcc195"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x81}}) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_usb_connect(0x2, 0x72f, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x65, 0x34, 0x2d, 0x40, 0x10fd, 0x8050, 0xc440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71d, 0x3, 0x4, 0xf8, 0x40, 0x80, [{{0x9, 0x4, 0x27, 0xfb, 0x10, 0xdf, 0xb2, 0x5c, 0x3f, [@generic={0x3b, 0x8, "210812de6497e7130fb3924c94ee3fd5df00907eb014f852f3eda7f5535f546e7d0c286ca739c8b83af60df6fbef854cc15929fe3bac743f4d"}, @generic={0x62, 0xa, "090d86ba2dcb9231b37af3b32c6ca83a04c7c9aee37e7de1d9b021bd4b5d18309533c7db8c626e161b64a4c259b31f18ff7f8eaf3962930a0c615f15c19a6499f175004a6f9ea7928b106d8774f5c4fb14a3315c34f7ea23dcefe3d436fea403"}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x78, 0x7, 0x40}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x2, 0x3c, 0x4, [@generic={0xa1, 0x31, "455d82e7893090a5811bfd672dbb87246bd6d5457fc6fae6db2026ade1f840d8388969f50eba7e2be818092d6423f4769342fb325e953cceff25a4bd5b837351b0625b3d0d5540e4f4b0774bfaccdae6bbf0d1be522f83ec9498522260787b732370ec5559d670e83dfa6349e69e353d447202378e83aa3141574d59b4cdd3812c3616be0af7ab9dd17474f08ce71c7425b5a941035777cc5126fb24899f31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xff}]}}, {{0x9, 0x5, 0x7, 0x12, 0x200, 0x68, 0x2, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x100}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xd0, 0x2, 0x40, [@generic={0xae, 0x10, "4050b2414be064c6ab2975db73cd1f3506bb9414d358cf6efef1e561f273d87e3c883118ccdb96e464da93074fc08822394a424b7599f4d02474a1e96f6b25a11540b87eef6aeeb014a2dc5915474215f7c630962239b55e5231402f69b2f79fa0f130c9e26e980f891c5f7d627bf9646ec841ab47e6e2c82fdb890676b15c89fcc1065868774e1bc58db662e8786e68643d9d6bab28d55bbd6bd0521e36b676f100ef5f426023d24d371fcf"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3f, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfb, 0x24}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x85, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x81, 0x8, 0x40}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x6, 0x80, [@generic={0x12, 0x9, "630cc06256eca0c8de604c2144c6f624"}, @generic={0x7e, 0x12, "2079fc5687f3818f5c16e153476674dfeb2a7c98f802e061d2b650cd03fd378cf1e65ed09097285ea12ed935b0a735ee3339b4596e84ccacac2fad232d8b52a424bb2c3891c74411731a5b49492952912f54115f71e61985cd5f7eb1a1ad2a9aa2bdb32a6342491715d244fcb8322b482fd84d6b8b44e776665a1ccd"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80623330ffa1af65, 0x8, 0x40, 0x0, [@generic={0xc, 0x9, "184d6a84ab6297dfeb09"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x80, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xa1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x5, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7f}]}}]}}, {{0x9, 0x4, 0xbf, 0x5, 0x8, 0x56, 0x6b, 0x4, 0x1f, [], [{{0x9, 0x5, 0x6, 0x0, 0xf9cd6616a829aea3, 0x7e, 0x7, 0xc, [@generic={0xe4, 0x30, "23939c91be6a40f004c45142db4df7b62e6abf4e494a395e18553553b271448073c9086cc301a1f6923e86ea5eb0bebb15e2e70938095299c8b192a22b7ffdd6cc9a35a724826034d77865ce6357261994fc17cd4b4951ba449636d0c74553dedbe70314465fa9343049d3aef4f30597030580a17551d4dcb214c6b0a8b53fd5299a2d74f8fdeb31427ecd1b073fa4110fb5b17713d72148bb42ceebc11777c9519ede25f27679297dd9b2be1875bf6feb206177f2872eaf9b16532596065725a5025044bc6e73d05f6e57c22b5590710f2dbfad9de2585f244433702ec36b41b914"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x1e7, 0x3, 0x82, 0x6a}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x81, 0x9, 0x20, [@generic={0x90, 0x8, "c759605f14c2a7fbbdd99f37c835691eacc1d213d47ef065d7bd2f7a290da0269001f1eb0ff4375e78b5d464299eff2323b749de272032451040670e0c07688ad3dc1a923874e764940e3de54c4d98445e6501de54ab8815e3511840a5b5d05cf428b7ab4283d968c7fc422fc26e5cd23ef2431d490aa362211d2198f2ec4e18d967001034cb2fabc251e11566f9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x53, 0x7f, 0x5, [@generic={0x8c, 0x30, "34c321c05b2b00f8fcb0bb90215be0cc69e2720093188639877a64f2d9538d7a3292409f1c342e0725ea7f6deda407627a2b689e0b30ee7339a7857c983e7b826b919c4c3a0c775a52ce96609955db0258e90b3e8d6e034e3a98f1e567ecd1c8351cedad60b969fb787f7146d41bfefdfff540ec348eac065e34e103b1e5df04a0e0c515eccefeafa973"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xeb, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x1, 0x7f, [@generic={0x8c, 0x5, "9ee634cc4dfb82b50e22a7bd02e77e7a189359d80b5335b9939ffd9be738f27bb00ddd0c0c1cef183b133811e00c4629e52088bdd10c8adb714d78d06a05c3e703adbfbabff369c7861786e8428bf2a0b4dedb2ac4fe8ab735220d250f3bfe7b728921534bf7d7ffa6a6dea2126c83875c2e43d6d307a2fa8a3755fe260f32ea66ada0495e7a0000f26f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf7d3}]}}]}}, {{0x9, 0x4, 0x27, 0x75, 0x1, 0x2, 0xec, 0xe7, 0x81, [], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x2, 0x9, 0xf1, [@generic={0x9b, 0x3, "ed2776b69e37c6824e0b70de0e17e14d61f39fa300ea79ef34c373b17160e157e7c91dfd27de931c259b01eff78cce3062b98d2f78a3793914719103098e1f45436708490db197afeb15742c6f6b000a15d9cb1670f336d10dc564dcd015b46deca09ac7aff89c811af3e40bfd8c9835bb1511d3fcaf9c3568190fc73cfbec1418c8c4fffe2048205dbc3d52f4822d32e3ca78527f3d8997ea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffe}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x9f, 0x6, 0x1f, 0xff, 0x6}, 0x75, &(0x7f0000000d40)={0x5, 0xf, 0x75, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x40, 0x0, 0x5d9}, @ss_container_id={0x14, 0x10, 0x4, 0x90, "4c0638a4db1593c24274b49e2d066f83"}, @generic={0x52, 0x10, 0x3, "d97ea7a1cb3f04209271601ad4538580cdc0e4c27b0183a1200ca82bcb3e02a49e523d98adfba2866e41e4049a3155010cca70191de94f75da1ddd61d04fa0ddd4033e433a1677510c1e6802a51ef9"}]}, 0x6, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "1ec5e3c72e0b88efbfc88a400700449389f66fca27ea6bbc0108c69a7550972a00d563ec766a76"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x200a}}, {0x35, &(0x7f0000000e80)=@string={0x35, 0x3, "d8b8971fea20b81eac5d13ff3a1af94c11690912cf3b6ec4a4801473c2a7a71b2d89f4f0d9682b12e07d6631903fa1c442c72a"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3401}}]}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:27:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0xfd529c770c9a5388, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) gettid() r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1600}}]}}) sendmsg$nl_xfrm(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x2b, 0x0, r9}, {@in=@empty, 0x4d2, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffffffff80000000, 0x6, 0x5}, {0x3, 0x401, 0x8}, 0x70bd2a, 0x34ff}, 0x0, 0x9}}, 0xf8}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r6}}, {@appraise}, {@uid_lt}, {@uid_eq={'uid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, 'group_id'}}, {@uid_eq}]}}) statx(r0, &(0x7f0000000800)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)="1f0563b769481d21161febc2cef5450ef0facfdfe4e277917b45de92320573439a658b0061bd19639171e8f5fc1846684293eb4c3663e49a5e4f2fd56138f58cf364d3a479b561f0c926b0c81076ed906bf1e52302a83c85", 0x58}, {&(0x7f00000000c0)="e67c0da656689992055a35685178a7bdb3600127313418e3a8b5eb8ac6560e1767e1ecfc21ddeb3543cf5953490393c9f50342f39141762ceb51f744fed16b66c8460105c367e120bc752f5e486a70f0ac2de3a7d8dfa919e8a182d21fa0b5ed072c3fce2810c853ee17d759a07ecbec97da7694f5a59aaef649fe37d9e482186f8c2bb6612d19d4426e1867cb0230c5fdc4e376abd473025287d0e84e012c95a91d4f4ebd1b72d869cb87bb08965e9ca927", 0xb2}, {&(0x7f0000000180)="5bffd81aa6b1564a6f1668033a628af5e6d495bd5b847ccb895b0d6ff6973f5ea45c603e775d099de76f45b31250b0f14d29fdac011bd10722707133f98f1129e7377a65d34357efd86f85012416f9f86d6a103177df46b87c50066366e74f78537aeac849a9edd6755279d60c25e95a57d8188e3f676927e216cb3f88ab5e9d05862e3deb325152fb559aa186cd63ed153e1517d5a52e9ae7a5854ece8a9c4a99e70d52cd99d1863170913fb45a41ab68d9b6bf9dc02c43eca61d9c8870648f3fc9bae1970af7481500eab5", 0xcc}, {&(0x7f0000000280)="bc925904f33cc2dbc934e005abcba0a52dd94261a6dcd0f86da2884d6e32adb729c14a272d51ab16c9aabd1c72cbbb30bdba25567493d521298ad8ebe62cafd5fd8e279782d82d04211480103127df2ee5fa536233ef2f88aa4b9f6913474ac2f264220afb90354967f835e3026e6fe7312f4aefe3adf0656d0ec33253f76924e9f33d49f414ef71c13968da2be9deff074486630c7f475d4776ef528d2cee43254ef12402c87611ec2d", 0xaa}, {&(0x7f0000000340)="5202d92aa7f34c231a79ac1eaa18745dcfdefa6217c0122af8369a8b025b74e105e42bed688836ea4a2eef24f140db8b76c44c816bab2787", 0x38}, {&(0x7f0000000380)="0dff8985", 0x4}], 0x6, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r11}}}], 0x20, 0x28000844}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="850e136d4cec76a0f4766fc55dc1a47a983d1ee0931e96052d0550f097e63cb6d6bb34aa9a3ff90652da7dd5159e8b0338fca6ea03d87d89d7e14886639608de", 0x40}, {&(0x7f0000000540)="d5824c3ee0c695df0aa37a3c433107659695033bd48377c66db5815f0bbd88faa57890bbfb1d0bc9d9d0a838d0463f1df2a98f01f4ee8d105ac69f43da55ebef2669c32b2538e745e5bd8aa71f8a7d3ffeea4b3cfb8afeae42c1116cca39ee2bdaf706caa7493dfdf1eaabed3580cff33711750c5f9ca8c631162a36e34fdcdac1d3144f69981d4396abe7", 0x8b}], 0x2, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x58, 0x80}}], 0x2, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:27:56 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f00000001c0)={0x6, r5}) 13:27:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x5000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:56 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d729894e7000000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r3, 0x0, &(0x7f0000000200)="6e22d95fbd6eed", 0x7, 0x8000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000540)={0xc}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f0000000100)={0x18, r12, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r12, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1ff}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:27:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1064.116084][T23002] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1064.147079][T22997] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1064.164757][T23003] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:27:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0xfd529c770c9a5388, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) (async) gettid() (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1600}}]}}) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x2b, 0x0, r9}, {@in=@empty, 0x4d2, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffffffff80000000, 0x6, 0x5}, {0x3, 0x401, 0x8}, 0x70bd2a, 0x34ff}, 0x0, 0x9}}, 0xf8}}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r6}}, {@appraise}, {@uid_lt}, {@uid_eq={'uid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, 'group_id'}}, {@uid_eq}]}}) (async, rerun: 64) statx(r0, &(0x7f0000000800)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) sendmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)="1f0563b769481d21161febc2cef5450ef0facfdfe4e277917b45de92320573439a658b0061bd19639171e8f5fc1846684293eb4c3663e49a5e4f2fd56138f58cf364d3a479b561f0c926b0c81076ed906bf1e52302a83c85", 0x58}, {&(0x7f00000000c0)="e67c0da656689992055a35685178a7bdb3600127313418e3a8b5eb8ac6560e1767e1ecfc21ddeb3543cf5953490393c9f50342f39141762ceb51f744fed16b66c8460105c367e120bc752f5e486a70f0ac2de3a7d8dfa919e8a182d21fa0b5ed072c3fce2810c853ee17d759a07ecbec97da7694f5a59aaef649fe37d9e482186f8c2bb6612d19d4426e1867cb0230c5fdc4e376abd473025287d0e84e012c95a91d4f4ebd1b72d869cb87bb08965e9ca927", 0xb2}, {&(0x7f0000000180)="5bffd81aa6b1564a6f1668033a628af5e6d495bd5b847ccb895b0d6ff6973f5ea45c603e775d099de76f45b31250b0f14d29fdac011bd10722707133f98f1129e7377a65d34357efd86f85012416f9f86d6a103177df46b87c50066366e74f78537aeac849a9edd6755279d60c25e95a57d8188e3f676927e216cb3f88ab5e9d05862e3deb325152fb559aa186cd63ed153e1517d5a52e9ae7a5854ece8a9c4a99e70d52cd99d1863170913fb45a41ab68d9b6bf9dc02c43eca61d9c8870648f3fc9bae1970af7481500eab5", 0xcc}, {&(0x7f0000000280)="bc925904f33cc2dbc934e005abcba0a52dd94261a6dcd0f86da2884d6e32adb729c14a272d51ab16c9aabd1c72cbbb30bdba25567493d521298ad8ebe62cafd5fd8e279782d82d04211480103127df2ee5fa536233ef2f88aa4b9f6913474ac2f264220afb90354967f835e3026e6fe7312f4aefe3adf0656d0ec33253f76924e9f33d49f414ef71c13968da2be9deff074486630c7f475d4776ef528d2cee43254ef12402c87611ec2d", 0xaa}, {&(0x7f0000000340)="5202d92aa7f34c231a79ac1eaa18745dcfdefa6217c0122af8369a8b025b74e105e42bed688836ea4a2eef24f140db8b76c44c816bab2787", 0x38}, {&(0x7f0000000380)="0dff8985", 0x4}], 0x6, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r11}}}], 0x20, 0x28000844}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="850e136d4cec76a0f4766fc55dc1a47a983d1ee0931e96052d0550f097e63cb6d6bb34aa9a3ff90652da7dd5159e8b0338fca6ea03d87d89d7e14886639608de", 0x40}, {&(0x7f0000000540)="d5824c3ee0c695df0aa37a3c433107659695033bd48377c66db5815f0bbd88faa57890bbfb1d0bc9d9d0a838d0463f1df2a98f01f4ee8d105ac69f43da55ebef2669c32b2538e745e5bd8aa71f8a7d3ffeea4b3cfb8afeae42c1116cca39ee2bdaf706caa7493dfdf1eaabed3580cff33711750c5f9ca8c631162a36e34fdcdac1d3144f69981d4396abe7", 0x8b}], 0x2, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x58, 0x80}}], 0x2, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:27:57 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f00000001c0)={0x6, r5}) 13:27:57 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xffffffffffffff53}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x20000000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127007d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) finit_module(r2, &(0x7f00000002c0)='/dev/iommu\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r10, 0x0, &(0x7f0000a2a000/0x4000)=nil, 0x4000, 0x3}) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = dup(r12) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r13, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r14, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1064.331604][T23003] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1064.428940][T23012] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1064.452695][T23012] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1064.473599][T17183] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1064.485742][T23018] iommufd_mock iommufd_mock4: Adding to iommu group 3 13:27:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0xfd529c770c9a5388, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) (async) gettid() (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000e80)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1600}}]}}) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x2b, 0x0, r9}, {@in=@empty, 0x4d2, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffffffff80000000, 0x6, 0x5}, {0x3, 0x401, 0x8}, 0x70bd2a, 0x34ff}, 0x0, 0x9}}, 0xf8}}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r6}}, {@appraise}, {@uid_lt}, {@uid_eq={'uid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, 'group_id'}}, {@uid_eq}]}}) statx(r0, &(0x7f0000000800)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)="1f0563b769481d21161febc2cef5450ef0facfdfe4e277917b45de92320573439a658b0061bd19639171e8f5fc1846684293eb4c3663e49a5e4f2fd56138f58cf364d3a479b561f0c926b0c81076ed906bf1e52302a83c85", 0x58}, {&(0x7f00000000c0)="e67c0da656689992055a35685178a7bdb3600127313418e3a8b5eb8ac6560e1767e1ecfc21ddeb3543cf5953490393c9f50342f39141762ceb51f744fed16b66c8460105c367e120bc752f5e486a70f0ac2de3a7d8dfa919e8a182d21fa0b5ed072c3fce2810c853ee17d759a07ecbec97da7694f5a59aaef649fe37d9e482186f8c2bb6612d19d4426e1867cb0230c5fdc4e376abd473025287d0e84e012c95a91d4f4ebd1b72d869cb87bb08965e9ca927", 0xb2}, {&(0x7f0000000180)="5bffd81aa6b1564a6f1668033a628af5e6d495bd5b847ccb895b0d6ff6973f5ea45c603e775d099de76f45b31250b0f14d29fdac011bd10722707133f98f1129e7377a65d34357efd86f85012416f9f86d6a103177df46b87c50066366e74f78537aeac849a9edd6755279d60c25e95a57d8188e3f676927e216cb3f88ab5e9d05862e3deb325152fb559aa186cd63ed153e1517d5a52e9ae7a5854ece8a9c4a99e70d52cd99d1863170913fb45a41ab68d9b6bf9dc02c43eca61d9c8870648f3fc9bae1970af7481500eab5", 0xcc}, {&(0x7f0000000280)="bc925904f33cc2dbc934e005abcba0a52dd94261a6dcd0f86da2884d6e32adb729c14a272d51ab16c9aabd1c72cbbb30bdba25567493d521298ad8ebe62cafd5fd8e279782d82d04211480103127df2ee5fa536233ef2f88aa4b9f6913474ac2f264220afb90354967f835e3026e6fe7312f4aefe3adf0656d0ec33253f76924e9f33d49f414ef71c13968da2be9deff074486630c7f475d4776ef528d2cee43254ef12402c87611ec2d", 0xaa}, {&(0x7f0000000340)="5202d92aa7f34c231a79ac1eaa18745dcfdefa6217c0122af8369a8b025b74e105e42bed688836ea4a2eef24f140db8b76c44c816bab2787", 0x38}, {&(0x7f0000000380)="0dff8985", 0x4}], 0x6, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r11}}}], 0x20, 0x28000844}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="850e136d4cec76a0f4766fc55dc1a47a983d1ee0931e96052d0550f097e63cb6d6bb34aa9a3ff90652da7dd5159e8b0338fca6ea03d87d89d7e14886639608de", 0x40}, {&(0x7f0000000540)="d5824c3ee0c695df0aa37a3c433107659695033bd48377c66db5815f0bbd88faa57890bbfb1d0bc9d9d0a838d0463f1df2a98f01f4ee8d105ac69f43da55ebef2669c32b2538e745e5bd8aa71f8a7d3ffeea4b3cfb8afeae42c1116cca39ee2bdaf706caa7493dfdf1eaabed3580cff33711750c5f9ca8c631162a36e34fdcdac1d3144f69981d4396abe7", 0x8b}], 0x2, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x58, 0x80}}], 0x2, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:27:57 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0x9, 0x8}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4200, 0x60, 0x1}, 0x18) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r0, &(0x7f0000000040)=0x7ff, 0x5) 13:27:57 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f00000001c0)={0x6, r5}) [ 1064.725136][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1064.779138][T23031] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1064.789866][T23031] CPU: 1 PID: 23031 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1064.800367][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1064.810476][T23031] Call Trace: [ 1064.813806][T23031] [ 1064.816784][T23031] dump_stack_lvl+0x125/0x1b0 [ 1064.821536][T23031] sysfs_warn_dup+0x7f/0xa0 [ 1064.826115][T23031] sysfs_create_dir_ns+0x247/0x2a0 [ 1064.831300][T23031] ? sysfs_create_mount_point+0xb0/0xb0 [ 1064.836928][T23031] ? spin_bug+0x1d0/0x1d0 [ 1064.841350][T23031] ? do_raw_spin_unlock+0x173/0x230 [ 1064.846641][T23031] kobject_add_internal+0x2c8/0x960 [ 1064.851913][T23031] kobject_add+0x16f/0x240 [ 1064.856653][T23031] ? kset_create_and_add+0x190/0x190 [ 1064.862042][T23031] ? kobject_put+0xbe/0x440 [ 1064.866614][T23031] ? bus_get_dev_root+0x5e/0x80 [ 1064.871518][T23031] device_add+0x289/0x1aa0 [ 1064.875976][T23031] ? device_initialize+0x510/0x510 [ 1064.881133][T23031] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1064.888021][T23031] ? __init_waitqueue_head+0xca/0x150 [ 1064.893457][T23031] iommufd_test+0x1c47/0x2e60 [ 1064.898210][T23031] ? reacquire_held_locks+0x4b0/0x4b0 [ 1064.903646][T23031] ? iommufd_selftest_destroy+0x100/0x100 [ 1064.909405][T23031] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1064.914487][T23031] iommufd_fops_ioctl+0x347/0x4d0 [ 1064.919570][T23031] ? iommufd_destroy+0x180/0x180 [ 1064.924656][T23031] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1064.929658][T23031] ? iommufd_destroy+0x180/0x180 [ 1064.934653][T23031] __x64_sys_ioctl+0x18f/0x210 [ 1064.939458][T23031] do_syscall_64+0x38/0xb0 [ 1064.943906][T23031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1064.949832][T23031] RIP: 0033:0x7f798a67cae9 [ 1064.954361][T23031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1064.974092][T23031] RSP: 002b:00007f798b3450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.982536][T23031] RAX: ffffffffffffffda RBX: 00007f798a79bf80 RCX: 00007f798a67cae9 [ 1064.990536][T23031] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1064.998533][T23031] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1065.006527][T23031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.014525][T23031] R13: 000000000000000b R14: 00007f798a79bf80 R15: 00007f798a8bfa48 [ 1065.022541][T23031] [ 1065.071400][T23031] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. [ 1065.093723][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1065.106341][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1065.126018][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.139601][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.192244][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1065.203157][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.483603][T17183] usb 5-1: usb_control_msg returned -32 [ 1065.489262][T17183] usbtmc 5-1:16.0: can't read capabilities [ 1065.832054][T23035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.842687][T23035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:27:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x7000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:27:59 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0x9, 0x8}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4200, 0x60, 0x1}, 0x18) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r0, &(0x7f0000000040)=0x7ff, 0x5) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0x9, 0x8}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4200, 0x60, 0x1}, 0x18) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendfile(r1, r0, &(0x7f0000000040)=0x7ff, 0x5) (async) 13:27:59 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xffffffffffffff53}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x20000000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127007d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) finit_module(r2, &(0x7f00000002c0)='/dev/iommu\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r10, 0x0, &(0x7f0000a2a000/0x4000)=nil, 0x4000, 0x3}) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = dup(r12) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(r13, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r14, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:27:59 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, r6, 0x88}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x306c1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) 13:27:59 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d729894e7000000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r3, 0x0, &(0x7f0000000200)="6e22d95fbd6eed", 0x7, 0x8000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000540)={0xc}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f0000000100)={0x18, r12, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r12, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1ff}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) [ 1067.100057][ T8465] usb 5-1: USB disconnect, device number 32 13:27:59 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x0, 0x23, 0x63, {0x63, 0x4, "4494547cab7c6b682511cb43b82ceee78306d16de63582b3928cc8193e35b73060fbcc06efa1d31627db3ab2b96ae533ae8cea17612e2b8f3e01b8d8dd5980c847daea845523944b020313f683a9e49c4e71b8228fb4128cdd4133665d64e0d919"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc85, 0xff, 0x1, {0x22, 0x3a0}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0xb5, "f9daa3138b86dc320f9d816e325c069cf089e6270d52ad07e2bf7604e56f4cd7480f983f84252f228a51ca7554362e993748c7f3ddce5d7777d418716291cebd23abae54906bad57bb59459a943c1156ffbbd1b47e9fb6d41c9a50af4d242c2174d55d832754e337a43d1a629dd8dfdf3c03486d5ad3e2b28a995bda581e582ac566f787524ce16e6847f8b0e76ac8002ed5c944dfe068769537685f1c73b2b2e097d36e8163969a77812c1a6dd80fce1cae945020"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xc1, "8329858a7649f587a15633db2bba19fa72b0a9e49622a3e8f7c307c9dc273437eb4709c3f1797ec6649a2d4725997c656c67db8b79c9c32053b6a52eceecdff2edcdb5a1e961b0ed8138cbd57f199f5d03872ab4a0ef1464dc8fa7aba9a6e113960bd71c46defe60927b79dcd0f9a74aa2441fe4dbac66b41d55f98ffa832f40da64a4d73863c5509f263d5b6b02285c2f846d8bf22db9bbfd730f0a4df2f8c197c4d3140c8718271d7ceb7b63ac3605d460d111798f9d08646dba645fb4bcc195"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x81}}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_usb_connect(0x2, 0x72f, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x65, 0x34, 0x2d, 0x40, 0x10fd, 0x8050, 0xc440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71d, 0x3, 0x4, 0xf8, 0x40, 0x80, [{{0x9, 0x4, 0x27, 0xfb, 0x10, 0xdf, 0xb2, 0x5c, 0x3f, [@generic={0x3b, 0x8, "210812de6497e7130fb3924c94ee3fd5df00907eb014f852f3eda7f5535f546e7d0c286ca739c8b83af60df6fbef854cc15929fe3bac743f4d"}, @generic={0x62, 0xa, "090d86ba2dcb9231b37af3b32c6ca83a04c7c9aee37e7de1d9b021bd4b5d18309533c7db8c626e161b64a4c259b31f18ff7f8eaf3962930a0c615f15c19a6499f175004a6f9ea7928b106d8774f5c4fb14a3315c34f7ea23dcefe3d436fea403"}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x78, 0x7, 0x40}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x2, 0x3c, 0x4, [@generic={0xa1, 0x31, "455d82e7893090a5811bfd672dbb87246bd6d5457fc6fae6db2026ade1f840d8388969f50eba7e2be818092d6423f4769342fb325e953cceff25a4bd5b837351b0625b3d0d5540e4f4b0774bfaccdae6bbf0d1be522f83ec9498522260787b732370ec5559d670e83dfa6349e69e353d447202378e83aa3141574d59b4cdd3812c3616be0af7ab9dd17474f08ce71c7425b5a941035777cc5126fb24899f31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xff}]}}, {{0x9, 0x5, 0x7, 0x12, 0x200, 0x68, 0x2, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x100}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xd0, 0x2, 0x40, [@generic={0xae, 0x10, "4050b2414be064c6ab2975db73cd1f3506bb9414d358cf6efef1e561f273d87e3c883118ccdb96e464da93074fc08822394a424b7599f4d02474a1e96f6b25a11540b87eef6aeeb014a2dc5915474215f7c630962239b55e5231402f69b2f79fa0f130c9e26e980f891c5f7d627bf9646ec841ab47e6e2c82fdb890676b15c89fcc1065868774e1bc58db662e8786e68643d9d6bab28d55bbd6bd0521e36b676f100ef5f426023d24d371fcf"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3f, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfb, 0x24}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x85, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x81, 0x8, 0x40}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x6, 0x80, [@generic={0x12, 0x9, "630cc06256eca0c8de604c2144c6f624"}, @generic={0x7e, 0x12, "2079fc5687f3818f5c16e153476674dfeb2a7c98f802e061d2b650cd03fd378cf1e65ed09097285ea12ed935b0a735ee3339b4596e84ccacac2fad232d8b52a424bb2c3891c74411731a5b49492952912f54115f71e61985cd5f7eb1a1ad2a9aa2bdb32a6342491715d244fcb8322b482fd84d6b8b44e776665a1ccd"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80623330ffa1af65, 0x8, 0x40, 0x0, [@generic={0xc, 0x9, "184d6a84ab6297dfeb09"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x80, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xa1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x5, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7f}]}}]}}, {{0x9, 0x4, 0xbf, 0x5, 0x8, 0x56, 0x6b, 0x4, 0x1f, [], [{{0x9, 0x5, 0x6, 0x0, 0xf9cd6616a829aea3, 0x7e, 0x7, 0xc, [@generic={0xe4, 0x30, "23939c91be6a40f004c45142db4df7b62e6abf4e494a395e18553553b271448073c9086cc301a1f6923e86ea5eb0bebb15e2e70938095299c8b192a22b7ffdd6cc9a35a724826034d77865ce6357261994fc17cd4b4951ba449636d0c74553dedbe70314465fa9343049d3aef4f30597030580a17551d4dcb214c6b0a8b53fd5299a2d74f8fdeb31427ecd1b073fa4110fb5b17713d72148bb42ceebc11777c9519ede25f27679297dd9b2be1875bf6feb206177f2872eaf9b16532596065725a5025044bc6e73d05f6e57c22b5590710f2dbfad9de2585f244433702ec36b41b914"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x1e7, 0x3, 0x82, 0x6a}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x81, 0x9, 0x20, [@generic={0x90, 0x8, "c759605f14c2a7fbbdd99f37c835691eacc1d213d47ef065d7bd2f7a290da0269001f1eb0ff4375e78b5d464299eff2323b749de272032451040670e0c07688ad3dc1a923874e764940e3de54c4d98445e6501de54ab8815e3511840a5b5d05cf428b7ab4283d968c7fc422fc26e5cd23ef2431d490aa362211d2198f2ec4e18d967001034cb2fabc251e11566f9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x53, 0x7f, 0x5, [@generic={0x8c, 0x30, "34c321c05b2b00f8fcb0bb90215be0cc69e2720093188639877a64f2d9538d7a3292409f1c342e0725ea7f6deda407627a2b689e0b30ee7339a7857c983e7b826b919c4c3a0c775a52ce96609955db0258e90b3e8d6e034e3a98f1e567ecd1c8351cedad60b969fb787f7146d41bfefdfff540ec348eac065e34e103b1e5df04a0e0c515eccefeafa973"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xeb, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x1, 0x7f, [@generic={0x8c, 0x5, "9ee634cc4dfb82b50e22a7bd02e77e7a189359d80b5335b9939ffd9be738f27bb00ddd0c0c1cef183b133811e00c4629e52088bdd10c8adb714d78d06a05c3e703adbfbabff369c7861786e8428bf2a0b4dedb2ac4fe8ab735220d250f3bfe7b728921534bf7d7ffa6a6dea2126c83875c2e43d6d307a2fa8a3755fe260f32ea66ada0495e7a0000f26f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf7d3}]}}]}}, {{0x9, 0x4, 0x27, 0x75, 0x1, 0x2, 0xec, 0xe7, 0x81, [], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x2, 0x9, 0xf1, [@generic={0x9b, 0x3, "ed2776b69e37c6824e0b70de0e17e14d61f39fa300ea79ef34c373b17160e157e7c91dfd27de931c259b01eff78cce3062b98d2f78a3793914719103098e1f45436708490db197afeb15742c6f6b000a15d9cb1670f336d10dc564dcd015b46deca09ac7aff89c811af3e40bfd8c9835bb1511d3fcaf9c3568190fc73cfbec1418c8c4fffe2048205dbc3d52f4822d32e3ca78527f3d8997ea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffe}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x9f, 0x6, 0x1f, 0xff, 0x6}, 0x75, &(0x7f0000000d40)={0x5, 0xf, 0x75, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x40, 0x0, 0x5d9}, @ss_container_id={0x14, 0x10, 0x4, 0x90, "4c0638a4db1593c24274b49e2d066f83"}, @generic={0x52, 0x10, 0x3, "d97ea7a1cb3f04209271601ad4538580cdc0e4c27b0183a1200ca82bcb3e02a49e523d98adfba2866e41e4049a3155010cca70191de94f75da1ddd61d04fa0ddd4033e433a1677510c1e6802a51ef9"}]}, 0x6, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "1ec5e3c72e0b88efbfc88a400700449389f66fca27ea6bbc0108c69a7550972a00d563ec766a76"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x200a}}, {0x35, &(0x7f0000000e80)=@string={0x35, 0x3, "d8b8971fea20b81eac5d13ff3a1af94c11690912cf3b6ec4a4801473c2a7a71b2d89f4f0d9682b12e07d6631903fa1c442c72a"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) [ 1067.161539][T23041] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1067.212032][T23039] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:00 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0x9, 0x8}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4200, 0x60, 0x1}, 0x18) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r0, &(0x7f0000000040)=0x7ff, 0x5) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0x9, 0x8}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4200, 0x60, 0x1}, 0x18) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendfile(r1, r0, &(0x7f0000000040)=0x7ff, 0x5) (async) [ 1067.258783][T23043] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:00 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r3}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d729894e7000000000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r3, 0x0, &(0x7f0000000200)="6e22d95fbd6eed", 0x7, 0x8000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000540)={0xc}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f0000000100)={0x18, r12, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r12, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1ff}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) [ 1067.316801][T23049] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1067.353026][T23049] iommufd_mock iommufd_mock4: Adding to iommu group 3 13:28:00 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, r6, 0x88}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x306c1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, r6, 0x88}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x306c1, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) (async) 13:28:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x64929d3d75aef01) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x2, 0x1, 0x0, 0x2a44}, 0x20) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x10001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000100)) preadv(r2, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1067.531490][T23065] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:00 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1067.676741][T23072] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1067.697613][T23072] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1067.739197][ T8465] usb 5-1: new high-speed USB device number 33 using dummy_hcd 13:28:00 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xffffffffffffff53}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x20000000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127007d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) finit_module(r2, &(0x7f00000002c0)='/dev/iommu\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r10, 0x0, &(0x7f0000a2a000/0x4000)=nil, 0x4000, 0x3}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r10, 0x0, &(0x7f0000a2a000/0x4000)=nil, 0x4000, 0x3}) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r12) (async) r13 = dup(r12) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000380)) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r13, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r14, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1067.799726][T23079] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1067.832249][T23079] CPU: 1 PID: 23079 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1067.842777][T23079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1067.852896][T23079] Call Trace: [ 1067.856491][T23079] [ 1067.859486][T23079] dump_stack_lvl+0x125/0x1b0 [ 1067.862516][T23082] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1067.864210][T23079] sysfs_warn_dup+0x7f/0xa0 [ 1067.864266][T23079] sysfs_create_dir_ns+0x247/0x2a0 [ 1067.880747][T23079] ? sysfs_create_mount_point+0xb0/0xb0 [ 1067.886378][T23079] ? spin_bug+0x1d0/0x1d0 [ 1067.890794][T23079] ? do_raw_spin_unlock+0x173/0x230 [ 1067.892860][T23082] iommufd_mock iommufd_mock4: Adding to iommu group 1 [ 1067.896101][T23079] kobject_add_internal+0x2c8/0x960 [ 1067.896160][T23079] kobject_add+0x16f/0x240 [ 1067.912799][T23079] ? kset_create_and_add+0x190/0x190 [ 1067.918172][T23079] ? kobject_put+0xbe/0x440 [ 1067.922755][T23079] ? bus_get_dev_root+0x5e/0x80 [ 1067.927786][T23079] device_add+0x289/0x1aa0 [ 1067.932294][T23079] ? device_initialize+0x510/0x510 [ 1067.937503][T23079] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1067.944690][T23079] ? __init_waitqueue_head+0xca/0x150 [ 1067.950154][T23079] iommufd_test+0x1c47/0x2e60 [ 1067.954920][T23079] ? reacquire_held_locks+0x4b0/0x4b0 [ 1067.960393][T23079] ? iommufd_selftest_destroy+0x100/0x100 [ 1067.966194][T23079] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1067.971306][T23079] iommufd_fops_ioctl+0x347/0x4d0 [ 1067.976412][T23079] ? iommufd_destroy+0x180/0x180 [ 1067.981458][T23079] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1067.986557][T23079] ? iommufd_destroy+0x180/0x180 [ 1067.991577][T23079] __x64_sys_ioctl+0x18f/0x210 [ 1067.996418][T23079] do_syscall_64+0x38/0xb0 [ 1068.000904][T23079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1068.006886][T23079] RIP: 0033:0x7f29a6e7cae9 [ 1068.011353][T23079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1068.031007][T23079] RSP: 002b:00007f29a7c1d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.039587][T23079] RAX: ffffffffffffffda RBX: 00007f29a6f9bf80 RCX: 00007f29a6e7cae9 [ 1068.047597][T23079] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1068.055603][T23079] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1068.063691][T23079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.071701][T23079] R13: 000000000000000b R14: 00007f29a6f9bf80 R15: 00007f29a70bfa48 [ 1068.079742][T23079] [ 1068.113411][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1068.165378][T23079] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, r6, 0x88}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x306c1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) 13:28:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x64929d3d75aef01) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x2, 0x1, 0x0, 0x2a44}, 0x20) (async, rerun: 32) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x10001) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000100)) (rerun: 32) preadv(r2, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:01 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1068.233769][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1068.254899][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1068.284172][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1068.318235][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.371820][T23095] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1068.388056][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.412720][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:28:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8889}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r1, 0x0, &(0x7f0000000240), 0x0, 0x1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) [ 1068.432278][T23093] iommufd_mock iommufd_mock3: Adding to iommu group 1 [ 1068.457216][T23099] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1068.583352][T23105] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:01 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x0, 0x23, 0x63, {0x63, 0x4, "4494547cab7c6b682511cb43b82ceee78306d16de63582b3928cc8193e35b73060fbcc06efa1d31627db3ab2b96ae533ae8cea17612e2b8f3e01b8d8dd5980c847daea845523944b020313f683a9e49c4e71b8228fb4128cdd4133665d64e0d919"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc85, 0xff, 0x1, {0x22, 0x3a0}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0xb5, "f9daa3138b86dc320f9d816e325c069cf089e6270d52ad07e2bf7604e56f4cd7480f983f84252f228a51ca7554362e993748c7f3ddce5d7777d418716291cebd23abae54906bad57bb59459a943c1156ffbbd1b47e9fb6d41c9a50af4d242c2174d55d832754e337a43d1a629dd8dfdf3c03486d5ad3e2b28a995bda581e582ac566f787524ce16e6847f8b0e76ac8002ed5c944dfe068769537685f1c73b2b2e097d36e8163969a77812c1a6dd80fce1cae945020"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x1, 0xc1, "8329858a7649f587a15633db2bba19fa72b0a9e49622a3e8f7c307c9dc273437eb4709c3f1797ec6649a2d4725997c656c67db8b79c9c32053b6a52eceecdff2edcdb5a1e961b0ed8138cbd57f199f5d03872ab4a0ef1464dc8fa7aba9a6e113960bd71c46defe60927b79dcd0f9a74aa2441fe4dbac66b41d55f98ffa832f40da64a4d73863c5509f263d5b6b02285c2f846d8bf22db9bbfd730f0a4df2f8c197c4d3140c8718271d7ceb7b63ac3605d460d111798f9d08646dba645fb4bcc195"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x81}}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_usb_connect(0x2, 0x72f, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x65, 0x34, 0x2d, 0x40, 0x10fd, 0x8050, 0xc440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71d, 0x3, 0x4, 0xf8, 0x40, 0x80, [{{0x9, 0x4, 0x27, 0xfb, 0x10, 0xdf, 0xb2, 0x5c, 0x3f, [@generic={0x3b, 0x8, "210812de6497e7130fb3924c94ee3fd5df00907eb014f852f3eda7f5535f546e7d0c286ca739c8b83af60df6fbef854cc15929fe3bac743f4d"}, @generic={0x62, 0xa, "090d86ba2dcb9231b37af3b32c6ca83a04c7c9aee37e7de1d9b021bd4b5d18309533c7db8c626e161b64a4c259b31f18ff7f8eaf3962930a0c615f15c19a6499f175004a6f9ea7928b106d8774f5c4fb14a3315c34f7ea23dcefe3d436fea403"}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x78, 0x7, 0x40}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x2, 0x3c, 0x4, [@generic={0xa1, 0x31, "455d82e7893090a5811bfd672dbb87246bd6d5457fc6fae6db2026ade1f840d8388969f50eba7e2be818092d6423f4769342fb325e953cceff25a4bd5b837351b0625b3d0d5540e4f4b0774bfaccdae6bbf0d1be522f83ec9498522260787b732370ec5559d670e83dfa6349e69e353d447202378e83aa3141574d59b4cdd3812c3616be0af7ab9dd17474f08ce71c7425b5a941035777cc5126fb24899f31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xff}]}}, {{0x9, 0x5, 0x7, 0x12, 0x200, 0x68, 0x2, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x100}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xd0, 0x2, 0x40, [@generic={0xae, 0x10, "4050b2414be064c6ab2975db73cd1f3506bb9414d358cf6efef1e561f273d87e3c883118ccdb96e464da93074fc08822394a424b7599f4d02474a1e96f6b25a11540b87eef6aeeb014a2dc5915474215f7c630962239b55e5231402f69b2f79fa0f130c9e26e980f891c5f7d627bf9646ec841ab47e6e2c82fdb890676b15c89fcc1065868774e1bc58db662e8786e68643d9d6bab28d55bbd6bd0521e36b676f100ef5f426023d24d371fcf"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3f, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfb, 0x24}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x85, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x81, 0x8, 0x40}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x6, 0x80, [@generic={0x12, 0x9, "630cc06256eca0c8de604c2144c6f624"}, @generic={0x7e, 0x12, "2079fc5687f3818f5c16e153476674dfeb2a7c98f802e061d2b650cd03fd378cf1e65ed09097285ea12ed935b0a735ee3339b4596e84ccacac2fad232d8b52a424bb2c3891c74411731a5b49492952912f54115f71e61985cd5f7eb1a1ad2a9aa2bdb32a6342491715d244fcb8322b482fd84d6b8b44e776665a1ccd"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80623330ffa1af65, 0x8, 0x40, 0x0, [@generic={0xc, 0x9, "184d6a84ab6297dfeb09"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x80, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xa1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x5, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7f}]}}]}}, {{0x9, 0x4, 0xbf, 0x5, 0x8, 0x56, 0x6b, 0x4, 0x1f, [], [{{0x9, 0x5, 0x6, 0x0, 0xf9cd6616a829aea3, 0x7e, 0x7, 0xc, [@generic={0xe4, 0x30, "23939c91be6a40f004c45142db4df7b62e6abf4e494a395e18553553b271448073c9086cc301a1f6923e86ea5eb0bebb15e2e70938095299c8b192a22b7ffdd6cc9a35a724826034d77865ce6357261994fc17cd4b4951ba449636d0c74553dedbe70314465fa9343049d3aef4f30597030580a17551d4dcb214c6b0a8b53fd5299a2d74f8fdeb31427ecd1b073fa4110fb5b17713d72148bb42ceebc11777c9519ede25f27679297dd9b2be1875bf6feb206177f2872eaf9b16532596065725a5025044bc6e73d05f6e57c22b5590710f2dbfad9de2585f244433702ec36b41b914"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x1e7, 0x3, 0x82, 0x6a}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x81, 0x9, 0x20, [@generic={0x90, 0x8, "c759605f14c2a7fbbdd99f37c835691eacc1d213d47ef065d7bd2f7a290da0269001f1eb0ff4375e78b5d464299eff2323b749de272032451040670e0c07688ad3dc1a923874e764940e3de54c4d98445e6501de54ab8815e3511840a5b5d05cf428b7ab4283d968c7fc422fc26e5cd23ef2431d490aa362211d2198f2ec4e18d967001034cb2fabc251e11566f9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x53, 0x7f, 0x5, [@generic={0x8c, 0x30, "34c321c05b2b00f8fcb0bb90215be0cc69e2720093188639877a64f2d9538d7a3292409f1c342e0725ea7f6deda407627a2b689e0b30ee7339a7857c983e7b826b919c4c3a0c775a52ce96609955db0258e90b3e8d6e034e3a98f1e567ecd1c8351cedad60b969fb787f7146d41bfefdfff540ec348eac065e34e103b1e5df04a0e0c515eccefeafa973"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xeb, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x1, 0x7f, [@generic={0x8c, 0x5, "9ee634cc4dfb82b50e22a7bd02e77e7a189359d80b5335b9939ffd9be738f27bb00ddd0c0c1cef183b133811e00c4629e52088bdd10c8adb714d78d06a05c3e703adbfbabff369c7861786e8428bf2a0b4dedb2ac4fe8ab735220d250f3bfe7b728921534bf7d7ffa6a6dea2126c83875c2e43d6d307a2fa8a3755fe260f32ea66ada0495e7a0000f26f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf7d3}]}}]}}, {{0x9, 0x4, 0x27, 0x75, 0x1, 0x2, 0xec, 0xe7, 0x81, [], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x2, 0x9, 0xf1, [@generic={0x9b, 0x3, "ed2776b69e37c6824e0b70de0e17e14d61f39fa300ea79ef34c373b17160e157e7c91dfd27de931c259b01eff78cce3062b98d2f78a3793914719103098e1f45436708490db197afeb15742c6f6b000a15d9cb1670f336d10dc564dcd015b46deca09ac7aff89c811af3e40bfd8c9835bb1511d3fcaf9c3568190fc73cfbec1418c8c4fffe2048205dbc3d52f4822d32e3ca78527f3d8997ea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffe}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x9f, 0x6, 0x1f, 0xff, 0x6}, 0x75, &(0x7f0000000d40)={0x5, 0xf, 0x75, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x40, 0x0, 0x5d9}, @ss_container_id={0x14, 0x10, 0x4, 0x90, "4c0638a4db1593c24274b49e2d066f83"}, @generic={0x52, 0x10, 0x3, "d97ea7a1cb3f04209271601ad4538580cdc0e4c27b0183a1200ca82bcb3e02a49e523d98adfba2866e41e4049a3155010cca70191de94f75da1ddd61d04fa0ddd4033e433a1677510c1e6802a51ef9"}]}, 0x6, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "1ec5e3c72e0b88efbfc88a400700449389f66fca27ea6bbc0108c69a7550972a00d563ec766a76"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x200a}}, {0x35, &(0x7f0000000e80)=@string={0x35, 0x3, "d8b8971fea20b81eac5d13ff3a1af94c11690912cf3b6ec4a4801473c2a7a71b2d89f4f0d9682b12e07d6631903fa1c442c72a"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x64929d3d75aef01) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x2, 0x1, 0x0, 0x2a44}, 0x20) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendfile(r3, r4, 0x0, 0x10001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000100)) preadv(r2, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x341, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x7, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:01 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8889}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r1, 0x0, &(0x7f0000000240), 0x0, 0x1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8889}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r1, 0x0, &(0x7f0000000240), 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async) [ 1068.744024][ T8465] usb 5-1: usb_control_msg returned -71 [ 1068.749728][ T8465] usbtmc 5-1:16.0: can't read capabilities [ 1068.827052][ T8465] usb 5-1: USB disconnect, device number 33 13:28:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "254364af514dc88c", "7834cb144c8b66249a74ccbd12bd49e8", "a3bcbf5f", "fa80920dff974620"}, 0x28) [ 1068.872825][T23114] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xa000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1068.924905][T23112] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8889}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r1, 0x0, &(0x7f0000000240), 0x0, 0x1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8889}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r1, 0x0, &(0x7f0000000240), 0x0, 0x1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async) 13:28:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x341, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6}) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x7, 0x3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) [ 1068.995686][T23123] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:28:01 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1069.142859][T23132] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "254364af514dc88c", "7834cb144c8b66249a74ccbd12bd49e8", "a3bcbf5f", "fa80920dff974620"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "254364af514dc88c", "7834cb144c8b66249a74ccbd12bd49e8", "a3bcbf5f", "fa80920dff974620"}, 0x28) [ 1069.304368][T23140] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1069.333503][ T8465] usb 5-1: new high-speed USB device number 34 using dummy_hcd 13:28:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x6, 0x5}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r9, 0xfffffffffffffdc9, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xab}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r11, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8}) [ 1069.388915][T23142] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1069.558427][T23148] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1069.603556][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1069.735950][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1069.747430][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1069.758117][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1069.771463][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1069.784823][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1069.794424][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.063592][ T8465] usb 5-1: GET_CAPABILITIES returned f9 [ 1070.069278][ T8465] usbtmc 5-1:16.0: can't read capabilities 13:28:02 executing program 4: r0 = semget$private(0x0, 0x1, 0x510) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/191) msgrcv(r0, &(0x7f0000000500)={0x0, ""/172}, 0xb4, 0x2, 0x3800) msgget$private(0x0, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x7}], 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x5ad381, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b7b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) bind(r4, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x3}}, 0x80) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r5, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xe000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:02 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x341, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x7, 0x3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:02 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async, rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (rerun: 64) 13:28:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x6, 0x5}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r9, 0xfffffffffffffdc9, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xab}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r11, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8}) 13:28:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "254364af514dc88c", "7834cb144c8b66249a74ccbd12bd49e8", "a3bcbf5f", "fa80920dff974620"}, 0x28) [ 1070.142773][ T8465] usb 5-1: USB disconnect, device number 34 [ 1070.289779][T23170] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:03 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 64) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async, rerun: 32) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0x6, 0x5}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r9, 0xfffffffffffffdc9, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xab}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r11, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8}) 13:28:03 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:03 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007c52189e89ddb344e5c3252bc16a0d817ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r1, 0x0, 0x76, 0x0, &(0x7f0000000640)="bb8baa663ecdd3a1ded843aa6ab96ff82586f37530d67610384e9b84ac883916f9bb6437b3fb9041e8532f7724c8da6de1bde733656dbfe940e1ccab86c0cdd0af3cba88f698fd149d7484c4f8d97fa0769ea9444a982cc2e8f1e5587c2f5d681f1d835b1f44eb36ee69bf92260dac50a998cc0a3c8b", 0x0, 0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x100}, 0x50) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/233, 0xe9}], 0x8, 0x0, 0xffff4fee) [ 1070.649730][T23186] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1070.695442][ T8465] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1070.703816][T23187] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:03 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000001c0)={0xbc, 0x4, 0x2, 0x9, "137c7d043046a7c97b792320551cb3b3d2933698d0342b1db7c5a6c3a277d1c01d752d98846e9047e78f05cb91a2c9f0c5210a85f41ef9adf484546290a919fa425a0535ddc15adedbca48cc4c582e66720c29e78aee1be1c66cbe1f86de02660aba81d8a5c6f4bd61bee44d902d29de9c5bca603652d2dc74891873096a7cd467eb78c758d3033f83ca412a3f6bb16e1c56bc18f716719dba8b292b6b19c7e2d839d08a"}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:03 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1070.918216][T23196] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1070.969601][T23197] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1070.986136][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1071.104332][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1071.126030][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1071.149367][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1071.166190][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8222, setting to 1024 [ 1071.182495][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1071.204297][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1071.222910][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.295927][ T8465] usbtmc 5-1:16.0: bulk endpoints not found 13:28:06 executing program 4: r0 = semget$private(0x0, 0x1, 0x510) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/191) (async) msgrcv(r0, &(0x7f0000000500)={0x0, ""/172}, 0xb4, 0x2, 0x3800) msgget$private(0x0, 0x0) (async) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x7}], 0x1, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x5ad381, 0x0) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b7b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 64) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) bind(r4, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x3}}, 0x80) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r1, r5, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:06 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007c52189e89ddb344e5c3252bc16a0d817ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r1, 0x0, 0x76, 0x0, &(0x7f0000000640)="bb8baa663ecdd3a1ded843aa6ab96ff82586f37530d67610384e9b84ac883916f9bb6437b3fb9041e8532f7724c8da6de1bde733656dbfe940e1ccab86c0cdd0af3cba88f698fd149d7484c4f8d97fa0769ea9444a982cc2e8f1e5587c2f5d681f1d835b1f44eb36ee69bf92260dac50a998cc0a3c8b", 0x0, 0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x100}, 0x50) (async) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/233, 0xe9}], 0x8, 0x0, 0xffff4fee) 13:28:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) dup3(r5, r6, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:06 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) fcntl$getflags(0xffffffffffffffff, 0x408) (async) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x18000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:06 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000001c0)={0xbc, 0x4, 0x2, 0x9, "137c7d043046a7c97b792320551cb3b3d2933698d0342b1db7c5a6c3a277d1c01d752d98846e9047e78f05cb91a2c9f0c5210a85f41ef9adf484546290a919fa425a0535ddc15adedbca48cc4c582e66720c29e78aee1be1c66cbe1f86de02660aba81d8a5c6f4bd61bee44d902d29de9c5bca603652d2dc74891873096a7cd467eb78c758d3033f83ca412a3f6bb16e1c56bc18f716719dba8b292b6b19c7e2d839d08a"}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1073.272716][ T782] usb 5-1: USB disconnect, device number 35 [ 1073.365764][T23210] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1073.392530][T23209] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1073.434997][T23211] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:28:06 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x428100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff, 0x6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) dup3(r5, r6, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:06 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007c52189e89ddb344e5c3252bc16a0d817ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r1, 0x0, 0x76, 0x0, &(0x7f0000000640)="bb8baa663ecdd3a1ded843aa6ab96ff82586f37530d67610384e9b84ac883916f9bb6437b3fb9041e8532f7724c8da6de1bde733656dbfe940e1ccab86c0cdd0af3cba88f698fd149d7484c4f8d97fa0769ea9444a982cc2e8f1e5587c2f5d681f1d835b1f44eb36ee69bf92260dac50a998cc0a3c8b", 0x0, 0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x100}, 0x50) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/233, 0xe9}], 0x8, 0x0, 0xffff4fee) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007c52189e89ddb344e5c3252bc16a0d817ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r1, 0x0, 0x76, 0x0, &(0x7f0000000640)="bb8baa663ecdd3a1ded843aa6ab96ff82586f37530d67610384e9b84ac883916f9bb6437b3fb9041e8532f7724c8da6de1bde733656dbfe940e1ccab86c0cdd0af3cba88f698fd149d7484c4f8d97fa0769ea9444a982cc2e8f1e5587c2f5d681f1d835b1f44eb36ee69bf92260dac50a998cc0a3c8b", 0x0, 0x80000001, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x100}, 0x50) (async) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/233, 0xe9}], 0x8, 0x0, 0xffff4fee) (async) 13:28:06 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000001c0)={0xbc, 0x4, 0x2, 0x9, "137c7d043046a7c97b792320551cb3b3d2933698d0342b1db7c5a6c3a277d1c01d752d98846e9047e78f05cb91a2c9f0c5210a85f41ef9adf484546290a919fa425a0535ddc15adedbca48cc4c582e66720c29e78aee1be1c66cbe1f86de02660aba81d8a5c6f4bd61bee44d902d29de9c5bca603652d2dc74891873096a7cd467eb78c758d3033f83ca412a3f6bb16e1c56bc18f716719dba8b292b6b19c7e2d839d08a"}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) dup(r6) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000001c0)={0xbc, 0x4, 0x2, 0x9, "137c7d043046a7c97b792320551cb3b3d2933698d0342b1db7c5a6c3a277d1c01d752d98846e9047e78f05cb91a2c9f0c5210a85f41ef9adf484546290a919fa425a0535ddc15adedbca48cc4c582e66720c29e78aee1be1c66cbe1f86de02660aba81d8a5c6f4bd61bee44d902d29de9c5bca603652d2dc74891873096a7cd467eb78c758d3033f83ca412a3f6bb16e1c56bc18f716719dba8b292b6b19c7e2d839d08a"}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) [ 1073.665357][T23227] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1073.692044][T23230] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:06 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x428100, 0x0) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x428100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff, 0x6}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) (async, rerun: 64) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) (rerun: 64) dup3(r5, r6, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1073.783612][ T782] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1073.826578][T23234] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1073.957194][T23242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1074.053507][ T782] usb 5-1: Using ep0 maxpacket: 8 [ 1074.184261][ T782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1074.201480][ T782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1074.211783][ T782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1074.228546][ T782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8222, setting to 1024 [ 1074.242487][ T782] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.262537][ T782] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1074.271710][ T782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.325256][ T782] usbtmc 5-1:16.0: bulk endpoints not found 13:28:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x10000, 0x165000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x4, 0x19e0f8, 0x1f3665}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:07 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xffffffffffffff37, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:07 executing program 3: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0xb, @pix={0x1, 0x8, 0x34324948, 0x3, 0x10000, 0x3f, 0xb, 0xb99d, 0x1, 0x7, 0x2, 0x1}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:07 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x428100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:07 executing program 4: r0 = semget$private(0x0, 0x1, 0x510) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/191) (async) msgrcv(r0, &(0x7f0000000500)={0x0, ""/172}, 0xb4, 0x2, 0x3800) msgget$private(0x0, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x7}], 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x5ad381, 0x0) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b7b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) bind(r4, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x3}}, 0x80) (async, rerun: 64) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r1, r5, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1f000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1074.707769][T17183] usb 5-1: USB disconnect, device number 36 [ 1074.818297][T23252] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1074.847924][T23256] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:07 executing program 3: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0xb, @pix={0x1, 0x8, 0x34324948, 0x3, 0x10000, 0x3f, 0xb, 0xb99d, 0x1, 0x7, 0x2, 0x1}}) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1074.875911][T23264] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1074.910608][T23264] CPU: 1 PID: 23264 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1074.921216][T23264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1074.931332][T23264] Call Trace: [ 1074.934668][T23264] [ 1074.937653][T23264] dump_stack_lvl+0x125/0x1b0 [ 1074.942423][T23264] sysfs_warn_dup+0x7f/0xa0 [ 1074.947015][T23264] sysfs_create_dir_ns+0x247/0x2a0 [ 1074.952209][T23264] ? sysfs_create_mount_point+0xb0/0xb0 [ 1074.957835][T23264] ? spin_bug+0x1d0/0x1d0 [ 1074.962257][T23264] ? do_raw_spin_unlock+0x173/0x230 [ 1074.967546][T23264] kobject_add_internal+0x2c8/0x960 [ 1074.972827][T23264] kobject_add+0x16f/0x240 [ 1074.977425][T23264] ? kset_create_and_add+0x190/0x190 [ 1074.982787][T23264] ? kobject_put+0xbe/0x440 [ 1074.987345][T23264] ? bus_get_dev_root+0x5e/0x80 [ 1074.992249][T23264] device_add+0x289/0x1aa0 [ 1074.996709][T23264] ? device_initialize+0x510/0x510 [ 1075.001884][T23264] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1075.008798][T23264] ? __init_waitqueue_head+0xca/0x150 [ 1075.014227][T23264] iommufd_test+0x1c47/0x2e60 [ 1075.018948][T23264] ? reacquire_held_locks+0x4b0/0x4b0 [ 1075.024367][T23264] ? iommufd_selftest_destroy+0x100/0x100 [ 1075.030148][T23264] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1075.035241][T23264] iommufd_fops_ioctl+0x347/0x4d0 [ 1075.040321][T23264] ? iommufd_destroy+0x180/0x180 [ 1075.045331][T23264] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1075.050327][T23264] ? iommufd_destroy+0x180/0x180 [ 1075.055318][T23264] __x64_sys_ioctl+0x18f/0x210 [ 1075.060254][T23264] do_syscall_64+0x38/0xb0 [ 1075.064709][T23264] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1075.070642][T23264] RIP: 0033:0x7f29a6e7cae9 [ 1075.075087][T23264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1075.094732][T23264] RSP: 002b:00007f29a7bfc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.103182][T23264] RAX: ffffffffffffffda RBX: 00007f29a6f9c050 RCX: 00007f29a6e7cae9 [ 1075.111219][T23264] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1075.119230][T23264] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1075.127242][T23264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.135278][T23264] R13: 000000000000006e R14: 00007f29a6f9c050 R15: 00007f29a70bfa48 [ 1075.143307][T23264] 13:28:08 executing program 3: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0xb, @pix={0x1, 0x8, 0x34324948, 0x3, 0x10000, 0x3f, 0xb, 0xb99d, 0x1, 0x7, 0x2, 0x1}}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0xb, @pix={0x1, 0x8, 0x34324948, 0x3, 0x10000, 0x3f, 0xb, 0xb99d, 0x1, 0x7, 0x2, 0x1}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:08 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) preadv2(r4, &(0x7f0000001600)=[{&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000001540)=""/59, 0x3b}, {&(0x7f0000001580)=""/120, 0x78}], 0x7, 0xffff, 0x7, 0x3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000240)={0xc, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc}) 13:28:08 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x10000, 0x165000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x4, 0x19e0f8, 0x1f3665}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x4, 0x19e0f8, 0x1f3665}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1075.286025][T23264] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1075.322624][T23270] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:28:08 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1075.346132][T23275] iommufd_mock iommufd_mock3: Adding to iommu group 1 13:28:08 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x10000, 0x165000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x4, 0x19e0f8, 0x1f3665}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1075.483907][T17183] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1075.562133][T23281] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1075.724207][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1075.845865][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1075.857521][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1075.867912][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.881845][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8222, setting to 1024 [ 1075.893133][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.906365][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1075.915578][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.971979][T17183] usbtmc 5-1:16.0: bulk endpoints not found 13:28:09 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000001c0)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x2f) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0xfff, 0x7fff, 0x1, 0x4, 0x10000]}, &(0x7f00000000c0)=0x54) dup3(r0, r4, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:09 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) preadv2(r4, &(0x7f0000001600)=[{&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000001540)=""/59, 0x3b}, {&(0x7f0000001580)=""/120, 0x78}], 0x7, 0xffff, 0x7, 0x3) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000240)={0xc, r1}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc}) 13:28:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x3f000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:09 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) 13:28:09 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xffffffffffffff37, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1076.542594][ T8465] usb 5-1: USB disconnect, device number 37 13:28:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) [ 1076.701954][T23290] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1076.744298][T23300] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1076.785688][T23299] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:28:09 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) preadv2(r4, &(0x7f0000001600)=[{&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000001540)=""/59, 0x3b}, {&(0x7f0000001580)=""/120, 0x78}], 0x7, 0xffff, 0x7, 0x3) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000240)={0xc, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc}) 13:28:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:09 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) [ 1076.983883][T23307] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:09 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0000, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) [ 1077.077129][ T8465] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1077.156905][T23315] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1077.212008][T23318] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1077.258427][T23318] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1077.353985][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1077.489366][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1077.500732][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1077.511142][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1077.521730][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.538780][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1077.548044][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.823629][ T8465] usb 5-1: usb_control_msg returned -32 [ 1077.829303][ T8465] usbtmc 5-1:16.0: can't read capabilities [ 1078.033396][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.042606][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.051800][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.060992][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.070184][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.079370][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.088483][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.097637][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.106771][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.115965][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.125127][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.134384][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.143530][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.152690][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.161847][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.170965][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1078.238811][ T8465] usb 5-1: USB disconnect, device number 38 13:28:11 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async, rerun: 64) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000001c0)) (async, rerun: 32) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (async) r5 = socket$inet6(0xa, 0x2, 0x2f) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0xfff, 0x7fff, 0x1, 0x4, 0x10000]}, &(0x7f00000000c0)=0x54) (async) dup3(r0, r4, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x5c000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:11 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) 13:28:11 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0000, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r7}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) 13:28:11 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xffffffffffffff37, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xb8) [ 1078.908449][T23336] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1078.925419][T23346] iommufd_mock iommufd_mock3: Adding to iommu group 1 [ 1078.967395][T23342] iommufd_mock iommufd_mock2: Adding to iommu group 2 13:28:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xb8) preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x3) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xb8) (async) 13:28:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x3) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xb8) 13:28:11 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) 13:28:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) dup2(r5, r0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1079.223526][ T8465] usb 5-1: new high-speed USB device number 39 using dummy_hcd 13:28:12 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socketpair(0x21, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1079.313799][T23359] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1079.346688][T23361] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1079.375494][T23359] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1079.394766][T23359] CPU: 0 PID: 23359 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1079.405271][T23359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1079.415380][T23359] Call Trace: [ 1079.418791][T23359] [ 1079.421788][T23359] dump_stack_lvl+0x125/0x1b0 [ 1079.426530][T23359] sysfs_warn_dup+0x7f/0xa0 [ 1079.431112][T23359] sysfs_create_dir_ns+0x247/0x2a0 [ 1079.436296][T23359] ? sysfs_create_mount_point+0xb0/0xb0 [ 1079.441915][T23359] ? spin_bug+0x1d0/0x1d0 [ 1079.446327][T23359] ? do_raw_spin_unlock+0x173/0x230 [ 1079.451606][T23359] kobject_add_internal+0x2c8/0x960 [ 1079.456898][T23359] kobject_add+0x16f/0x240 [ 1079.461386][T23359] ? kset_create_and_add+0x190/0x190 [ 1079.466745][T23359] ? kobject_put+0xbe/0x440 [ 1079.471332][T23359] ? bus_get_dev_root+0x5e/0x80 [ 1079.476261][T23359] device_add+0x289/0x1aa0 [ 1079.480739][T23359] ? device_initialize+0x510/0x510 [ 1079.486006][T23359] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1079.493018][T23359] ? __init_waitqueue_head+0xca/0x150 [ 1079.498474][T23359] iommufd_test+0x1c47/0x2e60 [ 1079.503223][T23359] ? reacquire_held_locks+0x4b0/0x4b0 [ 1079.508685][T23359] ? iommufd_selftest_destroy+0x100/0x100 [ 1079.514482][T23359] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1079.519584][T23359] iommufd_fops_ioctl+0x347/0x4d0 [ 1079.524688][T23359] ? iommufd_destroy+0x180/0x180 [ 1079.529795][T23359] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1079.534817][T23359] ? iommufd_destroy+0x180/0x180 [ 1079.539821][T23359] __x64_sys_ioctl+0x18f/0x210 [ 1079.544650][T23359] do_syscall_64+0x38/0xb0 [ 1079.549156][T23359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1079.555116][T23359] RIP: 0033:0x7f798a67cae9 [ 1079.559585][T23359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1079.579260][T23359] RSP: 002b:00007f798b3450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.587737][T23359] RAX: ffffffffffffffda RBX: 00007f798a79bf80 RCX: 00007f798a67cae9 [ 1079.595761][T23359] RDX: 00000000200001c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1079.603784][T23359] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1079.611805][T23359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.619822][T23359] R13: 000000000000000b R14: 00007f798a79bf80 R15: 00007f798a8bfa48 [ 1079.627975][T23359] [ 1079.645402][T23359] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1079.703849][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1079.835537][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1079.847184][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1079.857467][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1079.873173][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.887655][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1079.897114][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:28:12 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000001c0)) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x2f) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0xfff, 0x7fff, 0x1, 0x4, 0x10000]}, &(0x7f00000000c0)=0x54) (async) dup3(r0, r4, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:12 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socketpair(0x21, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x6a000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:12 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x15d303, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:12 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) dup2(r5, r0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) dup2(r5, r0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:28:12 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffdd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1080.178946][ T8465] usb 5-1: usb_control_msg returned -32 [ 1080.187344][ T8465] usbtmc 5-1:16.0: can't read capabilities [ 1080.242279][ T8465] usb 5-1: USB disconnect, device number 39 13:28:13 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x15d303, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1080.294859][T23372] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1080.333091][T23375] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:13 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffdd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffdd}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:28:13 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) dup2(r5, r0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) socketpair(0x21, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1080.498728][T23383] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1080.540864][T23383] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:13 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x15d303, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:13 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffdd}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1080.607719][T23393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1080.735475][ T8465] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1080.745908][T23400] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1080.769557][T23400] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1080.794825][T23400] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1080.803797][T23400] iommufd_mock iommufd_mock4: Adding to iommu group 3 [ 1080.819954][T23400] iommufd_mock iommufd_mock5: Adding to iommu group 4 [ 1080.852109][T23400] iommufd_mock iommufd_mock6: Adding to iommu group 5 [ 1080.869356][T23400] iommufd_mock iommufd_mock7: Adding to iommu group 6 [ 1080.898635][T23400] iommufd_mock iommufd_mock8: Adding to iommu group 7 [ 1080.913899][T23400] iommufd_mock iommufd_mock9: Adding to iommu group 8 [ 1080.938019][T23400] iommufd_mock iommufd_mock10: Adding to iommu group 9 [ 1080.949467][T23400] iommufd_mock iommufd_mock11: Adding to iommu group 10 [ 1080.960798][T23400] iommufd_mock iommufd_mock12: Adding to iommu group 11 [ 1080.971686][T23400] iommufd_mock iommufd_mock13: Adding to iommu group 12 [ 1080.985296][T23400] iommufd_mock iommufd_mock14: Adding to iommu group 13 [ 1080.999518][T23400] iommufd_mock iommufd_mock15: Adding to iommu group 14 [ 1081.012016][T23400] iommufd_mock iommufd_mock16: Adding to iommu group 15 [ 1081.024701][T23400] iommufd_mock iommufd_mock17: Adding to iommu group 16 [ 1081.026482][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1081.036009][T23400] iommufd_mock iommufd_mock18: Adding to iommu group 17 [ 1081.052461][T23400] iommufd_mock iommufd_mock19: Adding to iommu group 18 [ 1081.063710][T23400] iommufd_mock iommufd_mock20: Adding to iommu group 19 [ 1081.076355][T23400] iommufd_mock iommufd_mock21: Adding to iommu group 20 [ 1081.090476][T23400] iommufd_mock iommufd_mock22: Adding to iommu group 21 [ 1081.106466][T23400] iommufd_mock iommufd_mock23: Adding to iommu group 22 [ 1081.115618][T23400] iommufd_mock iommufd_mock24: Adding to iommu group 23 [ 1081.127108][T23400] iommufd_mock iommufd_mock25: Adding to iommu group 24 [ 1081.139423][T23400] iommufd_mock iommufd_mock26: Adding to iommu group 25 [ 1081.150531][T23400] iommufd_mock iommufd_mock27: Adding to iommu group 26 [ 1081.162103][T23400] iommufd_mock iommufd_mock28: Adding to iommu group 27 [ 1081.174093][T23400] iommufd_mock iommufd_mock29: Adding to iommu group 28 [ 1081.174180][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1081.188305][T23400] iommufd_mock iommufd_mock30: Adding to iommu group 29 [ 1081.202675][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1081.214234][T23400] iommufd_mock iommufd_mock31: Adding to iommu group 30 [ 1081.218337][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.228830][T23400] iommufd_mock iommufd_mock32: Adding to iommu group 31 [ 1081.239744][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.246212][T23400] iommufd_mock iommufd_mock33: Adding to iommu group 32 [ 1081.267851][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1081.268976][T23400] iommufd_mock iommufd_mock34: Adding to iommu group 33 [ 1081.277631][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.292099][T23400] iommufd_mock iommufd_mock35: Adding to iommu group 34 [ 1081.321770][T23400] iommufd_mock iommufd_mock36: Adding to iommu group 35 [ 1081.338395][T23400] iommufd_mock iommufd_mock37: Adding to iommu group 36 [ 1081.351582][T23400] iommufd_mock iommufd_mock38: Adding to iommu group 37 [ 1081.362975][T23400] iommufd_mock iommufd_mock39: Adding to iommu group 38 [ 1081.385427][T23400] iommufd_mock iommufd_mock40: Adding to iommu group 39 [ 1081.400095][T23400] iommufd_mock iommufd_mock41: Adding to iommu group 40 [ 1081.415269][T23400] iommufd_mock iommufd_mock42: Adding to iommu group 41 [ 1081.430064][T23400] iommufd_mock iommufd_mock43: Adding to iommu group 42 [ 1081.441757][T23400] iommufd_mock iommufd_mock44: Adding to iommu group 43 [ 1081.451175][T23400] iommufd_mock iommufd_mock45: Adding to iommu group 44 [ 1081.466464][T23400] iommufd_mock iommufd_mock46: Adding to iommu group 45 [ 1081.476065][T23400] iommufd_mock iommufd_mock47: Adding to iommu group 46 [ 1081.488153][T23400] iommufd_mock iommufd_mock48: Adding to iommu group 47 [ 1081.501935][T23400] iommufd_mock iommufd_mock49: Adding to iommu group 48 [ 1081.516758][T23400] iommufd_mock iommufd_mock50: Adding to iommu group 49 [ 1081.526132][T23400] iommufd_mock iommufd_mock51: Adding to iommu group 50 [ 1081.540873][T23400] iommufd_mock iommufd_mock52: Adding to iommu group 51 [ 1081.573757][ T8465] usb 5-1: usb_control_msg returned -32 [ 1081.581389][ T8465] usbtmc 5-1:16.0: can't read capabilities 13:28:14 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336218dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0a020000000905050200de7e001009058b1e2001cf76e770e9d67963dcf07a3961401b2755b2abdfff7777325468f7e40b6de2ce60d868a4ec35fe6423ae288b9eaffee50cc11899694c17861555c3e5d8ae0b1a51b6366be4f4cebff57f71e93ca222c7ab449b240f21c6756f202db9f29202fe376da124ac8ed529b1", @ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 13:28:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:14 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xfffffffffffffffe}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r7, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x7708d2caf46f3fd1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r9}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x70000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1081.660287][T17183] usb 5-1: USB disconnect, device number 40 [ 1081.786888][T23408] iommufd_mock iommufd_mock23: Adding to iommu group 0 13:28:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) (async) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) [ 1081.861567][T23415] iommufd_mock iommufd_mock14: Adding to iommu group 1 [ 1081.929037][T23409] iommufd_mock iommufd_mock10: Adding to iommu group 2 13:28:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r4}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:14 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) r8 = dup2(r5, r5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) 13:28:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 13:28:14 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xfffffffffffffffe}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r7, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x7708d2caf46f3fd1}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r9}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1082.187405][T23423] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1082.219426][T23423] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1082.246191][T23424] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r4}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:28:15 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (async) r8 = dup2(r5, r5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) [ 1082.319932][T23427] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1082.449279][T23434] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1082.469469][T23436] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1082.481210][T23434] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1082.499330][T23434] CPU: 1 PID: 23434 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1082.509923][T23434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1082.520031][T23434] Call Trace: [ 1082.523364][T23434] [ 1082.526353][T23434] dump_stack_lvl+0x125/0x1b0 [ 1082.531095][T23434] sysfs_warn_dup+0x7f/0xa0 [ 1082.535675][T23434] sysfs_create_dir_ns+0x247/0x2a0 [ 1082.540858][T23434] ? sysfs_create_mount_point+0xb0/0xb0 [ 1082.546475][T23434] ? spin_bug+0x1d0/0x1d0 [ 1082.550892][T23434] ? do_raw_spin_unlock+0x173/0x230 [ 1082.556174][T23434] kobject_add_internal+0x2c8/0x960 [ 1082.558353][T23438] iommufd_mock iommufd_mock4: Adding to iommu group 2 [ 1082.561506][T23434] kobject_add+0x16f/0x240 [ 1082.572745][T23434] ? kset_create_and_add+0x190/0x190 [ 1082.578182][T23434] ? kobject_put+0xbe/0x440 [ 1082.582752][T23434] ? bus_get_dev_root+0x5e/0x80 [ 1082.587674][T23434] device_add+0x289/0x1aa0 [ 1082.592152][T23434] ? device_initialize+0x510/0x510 [ 1082.597342][T23434] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1082.604267][T23434] ? __init_waitqueue_head+0xca/0x150 [ 1082.609708][T23434] iommufd_test+0x1c47/0x2e60 [ 1082.614429][T23434] ? reacquire_held_locks+0x4b0/0x4b0 [ 1082.619850][T23434] ? iommufd_selftest_destroy+0x100/0x100 [ 1082.625617][T23434] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1082.630685][T23434] iommufd_fops_ioctl+0x347/0x4d0 [ 1082.635755][T23434] ? iommufd_destroy+0x180/0x180 [ 1082.640749][T23434] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1082.645728][T23434] ? iommufd_destroy+0x180/0x180 [ 1082.650704][T23434] __x64_sys_ioctl+0x18f/0x210 [ 1082.655529][T23434] do_syscall_64+0x38/0xb0 [ 1082.660008][T23434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1082.666037][T23434] RIP: 0033:0x7f69ab27cae9 [ 1082.670491][T23434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1082.690146][T23434] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.698599][T23434] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1082.706602][T23434] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1082.714605][T23434] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1082.722626][T23434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.730634][T23434] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1082.738656][T23434] [ 1082.759935][T23434] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x7e000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:15 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35", 0x53}, {&(0x7f0000000a00)="316f825a3d29f9", 0x7}], 0x2}}], 0x1, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000580)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000180)=""/25, 0x19}], 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x12) ptrace$setsig(0x4207, 0x0, 0x0, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000200)='net/ipv6_route\x00') process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/127, 0x7f}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f00000002c0)=""/64, 0x40}], 0x2, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8ced4e3438300a3c2575ec6c6bb66ac98239e4"], 0xb) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) openat$cgroup_ro(r1, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000000900)=""/246, 0xf6}], 0x2, 0x1, 0x0) 13:28:15 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xfffffffffffffffe}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r7, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x7708d2caf46f3fd1}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r9}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:15 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336218dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0a020000000905050200de7e001009058b1e2001cf76e770e9d67963dcf07a3961401b2755b2abdfff7777325468f7e40b6de2ce60d868a4ec35fe6423ae288b9eaffee50cc11899694c17861555c3e5d8ae0b1a51b6366be4f4cebff57f71e93ca222c7ab449b240f21c6756f202db9f29202fe376da124ac8ed529b1", @ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x4, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336218dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0a020000000905050200de7e001009058b1e2001cf76e770e9d67963dcf07a3961401b2755b2abdfff7777325468f7e40b6de2ce60d868a4ec35fe6423ae288b9eaffee50cc11899694c17861555c3e5d8ae0b1a51b6366be4f4cebff57f71e93ca222c7ab449b240f21c6756f202db9f29202fe376da124ac8ed529b1", @ANYRES16=r0], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) 13:28:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:15 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (async) r8 = dup2(r5, r5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) [ 1082.944947][T23442] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1082.972137][T23453] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1082.995961][T23454] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1083.007781][T23453] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1083.050598][T23454] CPU: 1 PID: 23454 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1083.061111][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1083.071212][T23454] Call Trace: [ 1083.074533][T23454] [ 1083.077512][T23454] dump_stack_lvl+0x125/0x1b0 [ 1083.082234][T23454] sysfs_warn_dup+0x7f/0xa0 [ 1083.086786][T23454] sysfs_create_dir_ns+0x247/0x2a0 [ 1083.091937][T23454] ? sysfs_create_mount_point+0xb0/0xb0 [ 1083.097531][T23454] ? spin_bug+0x1d0/0x1d0 [ 1083.101916][T23454] ? do_raw_spin_unlock+0x173/0x230 [ 1083.107208][T23454] kobject_add_internal+0x2c8/0x960 [ 1083.112455][T23454] kobject_add+0x16f/0x240 [ 1083.116912][T23454] ? kset_create_and_add+0x190/0x190 [ 1083.122238][T23454] ? kobject_put+0xbe/0x440 [ 1083.126902][T23454] ? bus_get_dev_root+0x5e/0x80 [ 1083.131798][T23454] device_add+0x289/0x1aa0 [ 1083.136338][T23454] ? device_initialize+0x510/0x510 [ 1083.141503][T23454] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1083.148400][T23454] ? __init_waitqueue_head+0xca/0x150 [ 1083.153824][T23454] iommufd_test+0x1c47/0x2e60 [ 1083.158556][T23454] ? reacquire_held_locks+0x4b0/0x4b0 [ 1083.163997][T23454] ? iommufd_selftest_destroy+0x100/0x100 [ 1083.169761][T23454] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1083.174830][T23454] iommufd_fops_ioctl+0x347/0x4d0 [ 1083.179898][T23454] ? iommufd_destroy+0x180/0x180 [ 1083.184889][T23454] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1083.189868][T23454] ? iommufd_destroy+0x180/0x180 [ 1083.194846][T23454] __x64_sys_ioctl+0x18f/0x210 [ 1083.199649][T23454] do_syscall_64+0x38/0xb0 [ 1083.204104][T23454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1083.210045][T23454] RIP: 0033:0x7f29a6e7cae9 [ 1083.214585][T23454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1083.234228][T23454] RSP: 002b:00007f29a7c1d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.242678][T23454] RAX: ffffffffffffffda RBX: 00007f29a6f9bf80 RCX: 00007f29a6e7cae9 13:28:15 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1083.250682][T23454] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1083.258769][T23454] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1083.266768][T23454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.274864][T23454] R13: 000000000000000b R14: 00007f29a6f9bf80 R15: 00007f29a70bfa48 [ 1083.283176][T23454] 13:28:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:28:16 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336218dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0a020000000905050200de7e001009058b1e2001cf76e770e9d67963dcf07a3961401b2755b2abdfff7777325468f7e40b6de2ce60d868a4ec35fe6423ae288b9eaffee50cc11899694c17861555c3e5d8ae0b1a51b6366be4f4cebff57f71e93ca222c7ab449b240f21c6756f202db9f29202fe376da124ac8ed529b1", @ANYRES16=r0], 0x0) (async) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336218dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0a020000000905050200de7e001009058b1e2001cf76e770e9d67963dcf07a3961401b2755b2abdfff7777325468f7e40b6de2ce60d868a4ec35fe6423ae288b9eaffee50cc11899694c17861555c3e5d8ae0b1a51b6366be4f4cebff57f71e93ca222c7ab449b240f21c6756f202db9f29202fe376da124ac8ed529b1", @ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) [ 1083.429738][T23454] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1083.534357][T23464] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1083.579317][T23464] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1083.611530][T23468] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001cd6ffff3e1ded2ccd00070f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) 13:28:16 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1083.686370][T23471] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:28:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x8dffffff, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1083.876576][T23479] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1083.925938][T23476] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1083.955232][T23482] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1084.028716][T23482] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1084.044033][T23482] CPU: 0 PID: 23482 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1084.054640][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1084.064741][T23482] Call Trace: [ 1084.068060][T23482] [ 1084.071037][T23482] dump_stack_lvl+0x125/0x1b0 [ 1084.075762][T23482] sysfs_warn_dup+0x7f/0xa0 [ 1084.080291][T23482] sysfs_create_dir_ns+0x247/0x2a0 [ 1084.085611][T23482] ? sysfs_create_mount_point+0xb0/0xb0 [ 1084.091208][T23482] ? spin_bug+0x1d0/0x1d0 [ 1084.095585][T23482] ? do_raw_spin_unlock+0x173/0x230 [ 1084.100938][T23482] kobject_add_internal+0x2c8/0x960 [ 1084.106214][T23482] kobject_add+0x16f/0x240 [ 1084.110696][T23482] ? kset_create_and_add+0x190/0x190 [ 1084.116034][T23482] ? kobject_put+0xbe/0x440 [ 1084.120560][T23482] ? bus_get_dev_root+0x5e/0x80 [ 1084.125444][T23482] device_add+0x289/0x1aa0 [ 1084.129900][T23482] ? device_initialize+0x510/0x510 [ 1084.135068][T23482] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1084.141982][T23482] ? __init_waitqueue_head+0xca/0x150 [ 1084.147410][T23482] iommufd_test+0x1c47/0x2e60 [ 1084.152120][T23482] ? reacquire_held_locks+0x4b0/0x4b0 [ 1084.157551][T23482] ? iommufd_selftest_destroy+0x100/0x100 [ 1084.163451][T23482] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1084.168598][T23482] iommufd_fops_ioctl+0x347/0x4d0 [ 1084.173681][T23482] ? iommufd_destroy+0x180/0x180 [ 1084.178665][T23482] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1084.183656][T23482] ? iommufd_destroy+0x180/0x180 [ 1084.188632][T23482] __x64_sys_ioctl+0x18f/0x210 [ 1084.193429][T23482] do_syscall_64+0x38/0xb0 [ 1084.197870][T23482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1084.204143][T23482] RIP: 0033:0x7f69ab27cae9 [ 1084.208590][T23482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1084.228237][T23482] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1084.236685][T23482] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1084.244685][T23482] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1084.252794][T23482] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1084.261504][T23482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.269520][T23482] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1084.277588][T23482] [ 1084.306679][T23482] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1084.332654][T23484] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:28:17 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001cd6ffff3e1ded2ccd00070f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) 13:28:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35", 0x53}, {&(0x7f0000000a00)="316f825a3d29f9", 0x7}], 0x2}}], 0x1, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000580)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000180)=""/25, 0x19}], 0x6, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) (async) tkill(0x0, 0x12) (async) ptrace$setsig(0x4207, 0x0, 0x0, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000200)='net/ipv6_route\x00') (async) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/127, 0x7f}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f00000002c0)=""/64, 0x40}], 0x2, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8ced4e3438300a3c2575ec6c6bb66ac98239e4"], 0xb) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) (async) openat$cgroup_ro(r1, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000000900)=""/246, 0xf6}], 0x2, 0x1, 0x0) [ 1084.546684][T23494] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:28:17 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x37) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x1, 0x1f}, {0x7, 0x3}, {0xc287, 0xffff}, {0x7f, 0x2}, {0xfff, 0x1000}, {0xd0120e0000000000}, {0x8, 0x3}, {0x100, 0x1ff}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r1}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000002c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0), 0x200080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000640)={0x28, 0x4, r2, r8, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff07002289e89ddb34e2f6b82913228d3088460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e700000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r12, 0x301, 0x0, 0x0, {}, [@handle=@pci={{0x8, 0x2}, {0x11}}]}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r12, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x44405) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) 13:28:17 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x23d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x3, 0x87}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x83, 0x40, 0x0, 0x20}, 0x2c, &(0x7f00000009c0)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0x1ef0f, 0x8, [0xff0000, 0xff0030, 0x0, 0xff0000, 0xff000f, 0x3fcf]}]}, 0x6, [{0xa0, &(0x7f0000000a00)=@string={0xa0, 0x3, "1e9a0511763991df288f80a401ca9ba12b93f825ac0dc0aff3a85c67e2e6a7f2a5a552dd136ecdab373a74c766f7d8d80430108c4684f2f97419b73290275008b159a45e7df05529546122704a9bfdcc7746cd4c64134d14f8119c4141b32194ce946e4fb3193c96072e2300d53bf9261d558f9ee8bcaab62f84df6585be6f3a70c4a8e4d2ffdad1b4821eb55194a0d03e4d28966c21a0487e40c068673e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x404}}, {0x6d, &(0x7f0000000b00)=@string={0x6d, 0x3, "1d6284175eb0b16bd2baa5c8979be6e4d3a8efc2d535eb2e1c4281a5bccbf23a8ff21c17870f3f6465e402282eea1c7ededf46d19725559e7c60b0a681bcf79a6600ed57e7fc8ede12721c0e74c59ff8072d4c40609ecc25d434f42ec630d432dbfb7979f617a89d76d41f"}}, {0x2e, &(0x7f0000000b80)=@string={0x2e, 0x3, "feac2e6a7d7e23faac3deefe887caf0a864b5285e67f4bdef5c1ef9e7a3079a12ad7380396e4a6a0cab7eabd"}}, {0xc0, &(0x7f0000001bc0)=@string={0xc0, 0x3, "229f8d270ae782e63f219e7e4a4879888f86defaa5f75ad899c15763206f2e144018f83a61019e6db516f1f396ae4dfc5e539c5ad44e7e94be449be6730d620975066ce4742a2c53786acd4508fc5c33675c6375b669210a0c667de8d92e8beb413884204b2545de4b4de13f7ab88ec1afbfd8d0e6a9b4d7e5358066d35b300eb3d9bdbb5273b86a26c4719b2c2bf5e465b53a75f0ce822bc4e680e8c03b755ad2f5c44e139b12007a81af4fd77f4ed8e9d1828b9e0c62df24f0961847d8"}}, {0x73, &(0x7f0000000bc0)=@string={0x73, 0x3, "e7a3c6b66d3260b8aa1b019265d34d0d5929dfa3357e7bc255f52f320a598d2d68a790c49ab4d7db393deb462a3cc4f129ebca7053218a2d1ab25526612d56b9360b922b30d3f97eda461707bde8898e4cc4a249bff7005ebba490c1820b67b8165f9ea7c2f67ac5555089cc7defc333c0"}}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_usb_connect(0x1, 0xef5, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x91, 0x16, 0x98, 0x0, 0x2100, 0x9e58, 0x6a17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee3, 0x4, 0x2, 0x8, 0xb0, 0xff, [{{0x9, 0x4, 0x96, 0xde, 0x2, 0xa4, 0x4e, 0x6b, 0xc9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x71b, 0x0, 0xa2}, [@ncm={0x6, 0x24, 0x1a, 0xa5a2, 0x14}]}, @uac_control={{0xa, 0x24, 0x1, 0x20, 0xb}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x1, 0x8], 0x1}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x8e6, 0x7f, "a6a0bd2b"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x5, 0x9, 'c'}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0x40, 0x7, [@generic={0xbc, 0x2, "7bb2b33be9a53b4d7e64c9e3eabe92acb6b1df6b1604a8c79ead24c869bf9abe3a7ccc873ca2e7c138e2a7f015846c095557474c3033111d40dd709949ffc4e556f024f323087b5fb15dcb51021e10a75bae80ff7120f26a95ccfc3f6fb0fd5b22f82082d8da416721afd7136f84e5d5c48cfff5479907000e80f9c4c57379ef68d0e45402a1a6c686bdd255d63f2cbd505b02ac7931126a3e0e66b81e158094b405654b5e4184112e5fff6cf66e533c4bf964494849e610dd0d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x2, 0x3f, [@generic={0x1b, 0x22, "0878a942305c4ecda33c38c701a83a9bb27bfc1c21347fa396"}]}}]}}, {{0x9, 0x4, 0x42, 0x9, 0xf, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x77, 0x4}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0xb80, 0xff, "993ebbd1"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x4, 0x3, 0x1], 0x81}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x2, 0x1, [0x4], 0xfa}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x4, 0xb9, 0x4, 0x0, 0x99}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x81, "129a5e"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x20, "8afa"}]}, @hid_hid={0x9, 0x21, 0xff34, 0xfd, 0x1, {0x22, 0x68e}}], [{{0x9, 0x5, 0x7, 0x4, 0x10, 0x81, 0xbf, 0x8, [@generic={0x7d, 0x3, "bc7a757d5a51808f2b18c96a59f12f785fa1464c4b9566f3a66900c1313bb8ead0078f4a25143238bf6262d244fdcf40df200eb3ee5493653db9df7acaefff3c2ffd49048394c886a8feca87def4ad381425e5f3a830543698a70561253a7096428fb5d63fe1a8b1311a83111e06b74c1706779a9b335c73158308"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x89, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x400}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xad, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x4, 0x80, [@generic={0xe8, 0x2, "14ca96222876a297c65745ff8017dd375b6e2030b1b040a82ff2cad10cebda75e951c0d3cc76112eb3a13b15883daec199681c39a4a9690cbed869a4226b526e52b79910ac47b83b10ad9c79231a61e1f6325d0c0f7fea3cc897933c75f6fff23e1e464483c41fff07818ac5f4063138999b43b24fddce8f694995f6eff260876543d8327307b8df2433e6de25b5693c6ef129b428b3e412000ed3c9c715bf666f9a509e9190cc9df317046a8e77fff8ee03933c4e6045a62b17983993a697fe319308f7831b0cc0a250e5c392917cf04af4d834ff0d4e92c0cbf3fdd1a92c569f86a09bc1ca"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x12, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x20}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7f, 0x0, 0x0, [@generic={0x7d, 0xc, "bece3959232a3c976e0c39cd163f8f25f5d42a45c64723bf584161974efcc47448f4beb1eca64f5a4652637ec5159250b6eb735a44bfae725c4d2f79f137faea663b537ccd008ee91b509e00cb223365fd7e3c859b987b9795d6d9fcddf374c6fe346957900257676e082eae02004a02c7111a43fb3821f89c5c18"}, @generic={0xc1, 0x21, "a72943392be353c26ae19caedbc9487cd7dfd9453911072c2bc65a9cfcca0a2b1724a667eeb70746af30cd43499b4c702d688146acc070b143ee28207c14f9a31ced9b0d400002664f95cf8880fdd55d9507ef6205d35fbe6f1bba668883170a15e933558aea8d1570fd71def7978e7c9811e87b704a58d90aff32c1c6da73f8f36454f5071832d7841b9d0a092ce80dfbcafa36007a73591d34c2680d6703583e105d6a4b35fad928ef93fc458b262c191f0cd6000a87fb937190e79e3c91"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x6, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x3f, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc6, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xe085}]}}, {{0x9, 0x5, 0x5, 0x1e, 0x3ff, 0x80, 0x92, 0x2, [@generic={0x39, 0x7, "471710b4d9f2ec354c572707cd80733e7905d15511daa7b2af4de6dd901c0aaf6b7b9650a28f1ac7c444d37336f61a8cd79c61b5ca98cf"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x4, 0x20, 0xf6, [@generic={0x6f, 0x13, "e6ba5cfd490246172bfb70af1f5bdde850a37f3a0afb11f04c9d655e44aeec7e68967e3e0d3b369a62d0d77e03c9e0f035f7c8e2bc74b7bf63950d187653ed1a8d946b8404f0767e66594071db78bf198ebedfd9ce6ac25bf74c82507af80eb0baae2b612da72d15de5750f527"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xff, 0x3, 0x7, [@generic={0x76, 0xd, "d3f4e3b479dcb9b8300ddcdb53dcb5de489af47722850bcacc4caa8a9d486dcf4f79a4ab2ee27c5f23633f03e99637048ae4143cafe00999eca124be2fefa104713db26c54960c7a16c5aac89d22dcc68fb184c8fe2420d200ef968d6e79907564bcadee2de4d063fd88c9e2b46e938e6401c1b2"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xfa, 0xd1, 0x81, [@generic={0x52, 0x5, "bc91d85b292d31212ec7bae3a9331f497273576301e409514847e8727cf33856734eda8e13639f03f8cb8727c09508149895557f2d8f7a924fde7aa9d0c08ab5717c0e7da76df4aa1b62df1d5a186fc8"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x2, 0x80, 0x4f, [@generic={0xe6, 0xe, "c21dbe113d7b11fa973149e3ed27ab44ff0e25bb5bf9d609a9028dc0d2affd90529c7745e4e742b6e9aba1f33fd067ab76bd6f4c96262770d401ece02a68f9f3a70d7ff10eff82e8fae6d3689778746b4467ea10a36f7f5aaeddcd8cc47a6fa0234a69cfdddbbc5b2042db4ade52cfe1aba1011dbc18b7a48a98e33f072915ca0a207d822f21982105906caf5997a713045c0ba1b67b72f00a5cd882694c5190dc4a9c138f65e381fafca16d6cd349acbefcb156bb74e086625908378c5c66e51b24c7f8d6e0f0e6fce939d5ba378b8c829c7cdf07156e7734da138cbbb5a92b447e33b7"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbb, 0x101}]}}]}}, {{0x9, 0x4, 0x5d, 0x6, 0xa, 0x2, 0x2, 0xff, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e003dba071"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1ff, 0x5, 0x9}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xc0, 0x24, 0x13, 0x1, "eb0046ada8d2c671f460ab27ef878e33d87a984226dbeb0858a9fcd596ab5bbf214421e6274acc4475e79542f17858bcc7e5044ba12e25f403666f198571963121f4d9d265f644d4760f5efe632043d07f334568277e4538b525cdedfb553bdaafc53c9e1ef9279b650ba33d7360539d3a7e3ba13a1ca2e72b090c363cbaedd6d7f2fe61dceabba754c311b945ddc9ff23d3572517099d8b078e9baa19bfa7bfc82233c9c2fc06f03dab439d7cda098c7a9a12633901ed6de59db9ce"}]}, @hid_hid={0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x35d}}], [{{0x9, 0x5, 0x5, 0x8, 0x3ff, 0xc2, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1c, 0xc50d}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x40, 0x3f, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x8411}, @generic={0x30, 0xc, "ae80a3e034fbdd00e036546b5da8af41b2a0f4b9eba9ddb5ef247b203462254035eac24d090df5246b05e5cf42be"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x3, 0x9, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x7, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x9f4bea469edf9587, 0x0, 0x400, 0x3, 0x8, 0x0, [@generic={0x90, 0x15, "39ac4c114bfe07c44a866b89bd6458daf3d17e930a6c4388240df881c4936f3b3f3bf37292f01ecc82a8076a4fda20c7649bdd996f6d3585506471a44356fa3f4a1fdf5603057c82dd82dc94686cfa12e364af30c99caaa137a632cf5ccc379b19057b76b2a7009fe1db306be8c89f14625b3e11498d93be229fb850e38c4a06b56a099a850730353868caefc7ce"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xf8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x8, 0x0, [@generic={0x91, 0x22, "f6ed017813645709ca4bdb51c5c33516add0ff8ed2bd6ccdc91614db35a188e2576eaba3151ec40c375972ae9bbe0fc66bc46af5a934e58b2572ad3a7f319bc093d269a44fa89f91d5b45e9fdfa7b36c8d4acb0688b5f76414b441adf8243eafc01d2e51981a6e2f7133782c2f20677ae373f400854b266529a4f7bdb2766f8ca84c71679265fa55dff4f2217a2a8c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1f, 0xaf, 0x0, [@generic={0x31, 0x23, "0e19aa91d64fc463eb3312d2b6b3c8fd1bbbd13cbafe4e732e5c7e67e16c0f9acf35a335bbd60bfd37a92c7e8e8d65"}, @generic={0x100, 0x22, "ec52c944b6937737a495d65a49b811df496fe2fa638011f3369d2711069ea027234f3e96760df6c585e61cbb8da98e68159b95d2e9260490ddf17baaa2feff24021fb48ee5d030f00bad38d7fc5f9c88e4f4dfc278d08bb84bfb7d90c11d9e21f14c071d0ff5085a110e826bd2ce11e49a3e8e521e64a0fe59f66f525edba73fd1929bbd7384f2728704a419dff990b2eeb00ad090ae4bfe0d5f1176b642bbb93bb91313d62ecceb40ee265d87fc8dbdb3b06f58e28bfbc24795ea1b1d278112dac9ab45b3eafac659c325d6d417afa2ac388d0cc7e1b39a8a062ef80095dbcb46416d0fa73a22addae17f6b020556a8efaad48f4ec4aea3abb3d4b01ae8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x81, 0x4, 0x40, [@generic={0xf9, 0x22, "5d9918c9338fb1309b88c4b73fcb313c685279da24f1a3eddb686464343bd2ccae92669da6d1669e48e051b1dc0037a5820797b65ea03bb29418484c596dc9709f03034c8c9df7b80ccfe839089523595f64db595dbd989246fb470e8de0f0210dcc230c832d947c2f212900466188a2b67fbe5d17c87ab79f795a7574c639e3308a32d2bfb035745779ce8b7cb826d76c7d16a285fd67a3402940fb3b5f6a41f2265b492bc8164bbfc19be7da964b0468f5cbf69d020337171d90ab820d4d2cda00b4ab25b5b20b4b58ee8dde7739a01d03bad5718c7c30e2094f0b9cf7a0d00352d25e69410ef6a9d9e928aefa3df9b5b67263e1e42e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x62, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x2b, 0x7, 0x5, 0xff, 0x1, 0x6, 0x1, [@generic={0x10, 0xf, "8b9ba995676f786e4917ddf1ff16"}], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x81, 0x40, [@generic={0xc0, 0x2, "f7b3e581fffe47cdaf822cb87e4ed6b8e5179278ad64b7965a7764039c94591ced4451f22e2b08c293dc4f5665a381ec9b72c080e87aff8174530e4c3e7eb792199fff689be996ada8076f561d525c595a5e89be8c6c9ae4d69793b526c827603b30584c393a112b6168716b46046b02640d4325e10b2a185d6e1939e39379a8ed28f26318983ced7c91c320d073852edb99f4035378dc4837f894d10a0d5aedfb7092ce6fe2fe4f0426920fd9659a583ce5864bcc2ef8bfec0b4435ef4e"}, @generic={0x6c, 0x31, "0c3838f9439e5aca26ed2a4919f5b1bbc69ad6c0f586329b8c2b2a018f3aaca317bde6ced6f3307fdca72cd929dc56bf065ea3055bd9a7a0124c49e153f43b5920a5878af426680c46c555c9809314669bee9e15207598cf00b2b81dbc1480451b1636952af81be4e0b2"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x3f, 0x40, 0x1, [@generic={0xa, 0x1, "bef619db3c839f78"}, @generic={0xb1, 0x22, "4bcab1ad504e332f803d9b27751488d66c0cd0db97dcc9e51490e7ba8ae4afa2f7aeaf15c5125a63238eb4085869e58a74e268b693dc83e16c5b5fc5279e5df81e6f794b3b30acee9ab9ddfa489d6ccf248d2404b631dd67c8f379d07686a34f87046a4c683b263f3f5a3b6b31b4d22dbee8757a46f0ed7743f2d5e86743cfac231ea77f041dcb5313ce1c095ee66b0a02a7a8732a61fa217914860acacb7555aba90b4c3005ffa38ce2316d822229"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xfe, 0xff, 0x5, [@generic={0x5b, 0x8, "e8b026fc16278f8c08755c2e2146cbbf9fa971b633cb8ca00ea7ab66645aba648b0c8e36d8a084f9578bc10a7c8ba59c07f502ee4efe39b94c5baea4f5e124281154ebc7889d2be0796742b4de2e9fad2aee426c66012c597b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x200}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x5, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0x5, 0x7, 0x40, 0x6}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fff000, 0xf00f, 0x3, [0x3f0f, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x7, 0x62}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x88, &(0x7f0000000200)=@string={0x88, 0x3, "9444b0965f1220d7b3b1236a22db6b42b2b22b866940078c72ba85e16bc33e5f5d28b427ebc00542486df0a0cc431f414dd262f8e3c1492dbc5c37f50d3a63b5b703b891d0c1c3c2938bfb122a08fc7adb2c566200e2a1025235a2c8f234651fa8b8b7fe52b7a434a97d6ba5c90f8bcd9cae75f51bb664d79d355130b571c1d6ec8e265704b7"}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "77ed4f1e743a51ec8e464afcfd5bbb60c81e342b3b76c540cd1ad51a1dddf4faee97901d2fa57ab88f307f3aecf039a62615508c0caca3cc60aabd688dd0365523e7e17c8e392ada37006b790785f637c83058f2987ebaf7332ed3b33c485ad6919292d00254eab964433b78ae3177eb59803ed71f724e6ad604bcf5b4b03e629accf46e321857b96cc1ea4ad9a974df929cd1648f4971525f5574abad6e8d9e1400ec38eee0d87f2cd7393c9920f8f0c1f862d1123f63d842"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0xb, &(0x7f0000000440)=@string={0xb, 0x3, "fc1497822736d9be88"}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "afddcacbb9cd8478c474cda9bcb66359e4dfbe0a911da071705d1cf1e0c939967bf67901b5b35cdc1761486ca42e9a4cb94a42422e3b2c2c910848df46141aa56c7d8cfdbb937f855cb92d0ccc5935cdd089e25b575d80ca695fdd670f2bf59ed068a029e3581d13e54c590219c82a025af352f6b24cb0f3b02a3ec5bed6521926d15446c33adc4d1fe0434ba17d15240dcdffa4c74ea824c505c87044859575d4895eccfebef5b1132ccf6e39d2"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x20, 0xc, 0x3, {0x3, 0x4, 'b'}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x29, 0xd9, "ae164f9213008021a3d80d5894d77960a0364e441dc1677209da13fead993a699373a9a2ffe98be1f2bb291244628ff552220d8c05362f538b2779a1b8410773327ddda6b4b8ca0d92ad0d59d8c8c9dbfa9975a509d3bd7f61b168fe01704dfbd4fffcf0ef249344f1711d171f47a9e35fbc752188aeeecfd4be8e9bec78429959aa1425fe12dd490dd93a816b6c17161eff0e82ea8382aa32cf39ecd94781794db6040a3bc6e4b5b20ef4c75378bee28d0e37d9a8da400b6ad5a9519bd20dccbe9c69c501b900b607d4a2c51b4f41eefd7ef8e1a24cd3f583"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000840)={0x0, 0x8, 0x1}}) r3 = io_uring_setup(0x6b0d, &(0x7f0000000c40)={0x0, 0x8850}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x16, &(0x7f0000000340)=[{&(0x7f0000000040)=""/244, 0xf4}], 0x1) io_uring_enter(r3, 0x867, 0x3145, 0x2, &(0x7f00000000c0)={[0x5]}, 0x8) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) r6 = dup3(r0, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000002000)=ANY=[@ANYBLOB="a8a440000102030109021b0001010ad0070904004f010701fb0709050102400004044034990117f24b2ba80f7f94776314ba00"/60], &(0x7f0000001fc0)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x300, 0x2, 0xff, 0xa, 0x8, 0x6}, 0xc5, &(0x7f0000001d80)={0x5, 0xf, 0xc5, 0x1, [@generic={0xc0, 0x10, 0x4, "cc8c4b37a22094c500f260f4df09f65411efaaab4e1f1517a27ac45b6ad38e9c5cfd1b751efd88acdf51970b8000dbcfd4bf15bbe60f2a2f910a67a0064534a3e4abbded8f541a8914d6d691d2be4ffd9bef041aa488bfaee2547f6c07f797b9f471bd4d008829b7216ed06b9fde5f5861a39b3a85ed08da01722ce085e50d006f77980b727e44989ed6b0e9605f141d77d2448a360b8db5bc7c84396d31e5f31bdd88f27cb84dcd0036f0b35e320fe58eead6254b7281cf7c42f1d38d"}]}, 0x2, [{0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x44b}}, {0xfb, &(0x7f0000001ec0)=@string={0xfb, 0x3, "51628c5bcadd65204a5d4175e5d79342a75024f010001f145434f0b9197611c3833c9beba4e6f6056d201c29d26f8cb11d5b9477e49a18bc880f73e06c465cbc051ff0574b60cec3e4b703539e73ecd92397bfac38c7d0c29116527c42a129c4d9dde5ed3370d1279b8c8f4d3818be404b2765f7aaa8b9c033ebf48486067a41a53f6d5552e8d7fb6b0c795ebe82f2542ce7fc187d0dbd39419299a39e4bcfc68ab0c8f0602cdfd79fee06bb1c96a1d3e6c4df65cd2bbf72615c1b3e894cac4fbdddcb66b1db6e8dd7624ff3b5755429865cd30fb51a9ab2e3d37e713fae80536d5ea1c63a5e0d48b0def363528bda65e2286ac937b73a91fe"}}]}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x9b, 0x4) semget$private(0x0, 0x1, 0x0) 13:28:17 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe71}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x5, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r2}) [ 1084.774382][T23504] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000100)={0x18, r5, 0x2, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001cd6ffff3e1ded2ccd00070f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r10}) [ 1084.859987][T23508] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:17 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe71}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x5, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r2}) 13:28:17 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x37) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x1, 0x1f}, {0x7, 0x3}, {0xc287, 0xffff}, {0x7f, 0x2}, {0xfff, 0x1000}, {0xd0120e0000000000}, {0x8, 0x3}, {0x100, 0x1ff}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r1}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000002c0)) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0), 0x200080, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000640)={0x28, 0x4, r2, r8, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff07002289e89ddb34e2f6b82913228d3088460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e700000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r12, 0x301, 0x0, 0x0, {}, [@handle=@pci={{0x8, 0x2}, {0x11}}]}, 0x30}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r12, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x44405) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) [ 1085.023871][ T8465] usb 5-1: new high-speed USB device number 41 using dummy_hcd 13:28:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xe8030000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1085.172197][T23521] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1085.219969][T23516] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1085.234621][ T8465] usb 5-1: device descriptor read/64, error -71 [ 1085.300422][T23524] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:18 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:18 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe71}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x5, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r2}) 13:28:18 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x37) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x1, 0x1f}, {0x7, 0x3}, {0xc287, 0xffff}, {0x7f, 0x2}, {0xfff, 0x1000}, {0xd0120e0000000000}, {0x8, 0x3}, {0x100, 0x1ff}]}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r1}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000002c0)) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0), 0x200080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000640)={0x28, 0x4, r2, r8, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff07002289e89ddb34e2f6b82913228d3088460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e700000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r12, 0x301, 0x0, 0x0, {}, [@handle=@pci={{0x8, 0x2}, {0x11}}]}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r12, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x44405) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) 13:28:18 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) (async) link(&(0x7f0000000080)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35", 0x53}, {&(0x7f0000000a00)="316f825a3d29f9", 0x7}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35", 0x53}, {&(0x7f0000000a00)="316f825a3d29f9", 0x7}], 0x2}}], 0x1, 0x0) getpid() (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000580)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000180)=""/25, 0x19}], 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x12) ptrace$setsig(0x4207, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) (async) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000200)='net/ipv6_route\x00') process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/127, 0x7f}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f00000002c0)=""/64, 0x40}], 0x2, 0x0) (async) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/127, 0x7f}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f00000002c0)=""/64, 0x40}], 0x2, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8ced4e3438300a3c2575ec6c6bb66ac98239e4"], 0xb) (async) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8ced4e3438300a3c2575ec6c6bb66ac98239e4"], 0xb) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) openat$cgroup_ro(r1, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000000900)=""/246, 0xf6}], 0x2, 0x1, 0x0) [ 1085.513584][ T8465] usb 5-1: new high-speed USB device number 42 using dummy_hcd 13:28:18 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0xc, r3}) [ 1085.584625][T23533] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1085.611888][T23537] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1085.672587][T23541] iommufd_mock iommufd_mock4: Adding to iommu group 0 [ 1085.713823][ T8465] usb 5-1: device descriptor read/64, error -71 [ 1085.718879][T23535] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1085.825175][T23548] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1085.837198][ T8465] usb usb5-port1: attempt power cycle [ 1086.283473][ T8465] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1086.383624][ T8465] usb 5-1: device descriptor read/8, error -71 [ 1086.673784][ T8465] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1086.785205][ T8465] usb 5-1: device descriptor read/8, error -71 [ 1086.904238][ T8465] usb usb5-port1: unable to enumerate USB device 13:28:20 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x23d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x3, 0x87}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x83, 0x40, 0x0, 0x20}, 0x2c, &(0x7f00000009c0)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0x1ef0f, 0x8, [0xff0000, 0xff0030, 0x0, 0xff0000, 0xff000f, 0x3fcf]}]}, 0x6, [{0xa0, &(0x7f0000000a00)=@string={0xa0, 0x3, "1e9a0511763991df288f80a401ca9ba12b93f825ac0dc0aff3a85c67e2e6a7f2a5a552dd136ecdab373a74c766f7d8d80430108c4684f2f97419b73290275008b159a45e7df05529546122704a9bfdcc7746cd4c64134d14f8119c4141b32194ce946e4fb3193c96072e2300d53bf9261d558f9ee8bcaab62f84df6585be6f3a70c4a8e4d2ffdad1b4821eb55194a0d03e4d28966c21a0487e40c068673e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x404}}, {0x6d, &(0x7f0000000b00)=@string={0x6d, 0x3, "1d6284175eb0b16bd2baa5c8979be6e4d3a8efc2d535eb2e1c4281a5bccbf23a8ff21c17870f3f6465e402282eea1c7ededf46d19725559e7c60b0a681bcf79a6600ed57e7fc8ede12721c0e74c59ff8072d4c40609ecc25d434f42ec630d432dbfb7979f617a89d76d41f"}}, {0x2e, &(0x7f0000000b80)=@string={0x2e, 0x3, "feac2e6a7d7e23faac3deefe887caf0a864b5285e67f4bdef5c1ef9e7a3079a12ad7380396e4a6a0cab7eabd"}}, {0xc0, &(0x7f0000001bc0)=@string={0xc0, 0x3, "229f8d270ae782e63f219e7e4a4879888f86defaa5f75ad899c15763206f2e144018f83a61019e6db516f1f396ae4dfc5e539c5ad44e7e94be449be6730d620975066ce4742a2c53786acd4508fc5c33675c6375b669210a0c667de8d92e8beb413884204b2545de4b4de13f7ab88ec1afbfd8d0e6a9b4d7e5358066d35b300eb3d9bdbb5273b86a26c4719b2c2bf5e465b53a75f0ce822bc4e680e8c03b755ad2f5c44e139b12007a81af4fd77f4ed8e9d1828b9e0c62df24f0961847d8"}}, {0x73, &(0x7f0000000bc0)=@string={0x73, 0x3, "e7a3c6b66d3260b8aa1b019265d34d0d5929dfa3357e7bc255f52f320a598d2d68a790c49ab4d7db393deb462a3cc4f129ebca7053218a2d1ab25526612d56b9360b922b30d3f97eda461707bde8898e4cc4a249bff7005ebba490c1820b67b8165f9ea7c2f67ac5555089cc7defc333c0"}}]}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = syz_usb_connect(0x1, 0xef5, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x91, 0x16, 0x98, 0x0, 0x2100, 0x9e58, 0x6a17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee3, 0x4, 0x2, 0x8, 0xb0, 0xff, [{{0x9, 0x4, 0x96, 0xde, 0x2, 0xa4, 0x4e, 0x6b, 0xc9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x71b, 0x0, 0xa2}, [@ncm={0x6, 0x24, 0x1a, 0xa5a2, 0x14}]}, @uac_control={{0xa, 0x24, 0x1, 0x20, 0xb}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x1, 0x8], 0x1}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x8e6, 0x7f, "a6a0bd2b"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x5, 0x9, 'c'}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0x40, 0x7, [@generic={0xbc, 0x2, "7bb2b33be9a53b4d7e64c9e3eabe92acb6b1df6b1604a8c79ead24c869bf9abe3a7ccc873ca2e7c138e2a7f015846c095557474c3033111d40dd709949ffc4e556f024f323087b5fb15dcb51021e10a75bae80ff7120f26a95ccfc3f6fb0fd5b22f82082d8da416721afd7136f84e5d5c48cfff5479907000e80f9c4c57379ef68d0e45402a1a6c686bdd255d63f2cbd505b02ac7931126a3e0e66b81e158094b405654b5e4184112e5fff6cf66e533c4bf964494849e610dd0d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x2, 0x3f, [@generic={0x1b, 0x22, "0878a942305c4ecda33c38c701a83a9bb27bfc1c21347fa396"}]}}]}}, {{0x9, 0x4, 0x42, 0x9, 0xf, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x77, 0x4}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0xb80, 0xff, "993ebbd1"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x4, 0x3, 0x1], 0x81}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x2, 0x1, [0x4], 0xfa}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x4, 0xb9, 0x4, 0x0, 0x99}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x81, "129a5e"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x20, "8afa"}]}, @hid_hid={0x9, 0x21, 0xff34, 0xfd, 0x1, {0x22, 0x68e}}], [{{0x9, 0x5, 0x7, 0x4, 0x10, 0x81, 0xbf, 0x8, [@generic={0x7d, 0x3, "bc7a757d5a51808f2b18c96a59f12f785fa1464c4b9566f3a66900c1313bb8ead0078f4a25143238bf6262d244fdcf40df200eb3ee5493653db9df7acaefff3c2ffd49048394c886a8feca87def4ad381425e5f3a830543698a70561253a7096428fb5d63fe1a8b1311a83111e06b74c1706779a9b335c73158308"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x89, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x400}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xad, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x4, 0x80, [@generic={0xe8, 0x2, "14ca96222876a297c65745ff8017dd375b6e2030b1b040a82ff2cad10cebda75e951c0d3cc76112eb3a13b15883daec199681c39a4a9690cbed869a4226b526e52b79910ac47b83b10ad9c79231a61e1f6325d0c0f7fea3cc897933c75f6fff23e1e464483c41fff07818ac5f4063138999b43b24fddce8f694995f6eff260876543d8327307b8df2433e6de25b5693c6ef129b428b3e412000ed3c9c715bf666f9a509e9190cc9df317046a8e77fff8ee03933c4e6045a62b17983993a697fe319308f7831b0cc0a250e5c392917cf04af4d834ff0d4e92c0cbf3fdd1a92c569f86a09bc1ca"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x12, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x20}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7f, 0x0, 0x0, [@generic={0x7d, 0xc, "bece3959232a3c976e0c39cd163f8f25f5d42a45c64723bf584161974efcc47448f4beb1eca64f5a4652637ec5159250b6eb735a44bfae725c4d2f79f137faea663b537ccd008ee91b509e00cb223365fd7e3c859b987b9795d6d9fcddf374c6fe346957900257676e082eae02004a02c7111a43fb3821f89c5c18"}, @generic={0xc1, 0x21, "a72943392be353c26ae19caedbc9487cd7dfd9453911072c2bc65a9cfcca0a2b1724a667eeb70746af30cd43499b4c702d688146acc070b143ee28207c14f9a31ced9b0d400002664f95cf8880fdd55d9507ef6205d35fbe6f1bba668883170a15e933558aea8d1570fd71def7978e7c9811e87b704a58d90aff32c1c6da73f8f36454f5071832d7841b9d0a092ce80dfbcafa36007a73591d34c2680d6703583e105d6a4b35fad928ef93fc458b262c191f0cd6000a87fb937190e79e3c91"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x6, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x3f, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc6, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xe085}]}}, {{0x9, 0x5, 0x5, 0x1e, 0x3ff, 0x80, 0x92, 0x2, [@generic={0x39, 0x7, "471710b4d9f2ec354c572707cd80733e7905d15511daa7b2af4de6dd901c0aaf6b7b9650a28f1ac7c444d37336f61a8cd79c61b5ca98cf"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x4, 0x20, 0xf6, [@generic={0x6f, 0x13, "e6ba5cfd490246172bfb70af1f5bdde850a37f3a0afb11f04c9d655e44aeec7e68967e3e0d3b369a62d0d77e03c9e0f035f7c8e2bc74b7bf63950d187653ed1a8d946b8404f0767e66594071db78bf198ebedfd9ce6ac25bf74c82507af80eb0baae2b612da72d15de5750f527"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xff, 0x3, 0x7, [@generic={0x76, 0xd, "d3f4e3b479dcb9b8300ddcdb53dcb5de489af47722850bcacc4caa8a9d486dcf4f79a4ab2ee27c5f23633f03e99637048ae4143cafe00999eca124be2fefa104713db26c54960c7a16c5aac89d22dcc68fb184c8fe2420d200ef968d6e79907564bcadee2de4d063fd88c9e2b46e938e6401c1b2"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xfa, 0xd1, 0x81, [@generic={0x52, 0x5, "bc91d85b292d31212ec7bae3a9331f497273576301e409514847e8727cf33856734eda8e13639f03f8cb8727c09508149895557f2d8f7a924fde7aa9d0c08ab5717c0e7da76df4aa1b62df1d5a186fc8"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x2, 0x80, 0x4f, [@generic={0xe6, 0xe, "c21dbe113d7b11fa973149e3ed27ab44ff0e25bb5bf9d609a9028dc0d2affd90529c7745e4e742b6e9aba1f33fd067ab76bd6f4c96262770d401ece02a68f9f3a70d7ff10eff82e8fae6d3689778746b4467ea10a36f7f5aaeddcd8cc47a6fa0234a69cfdddbbc5b2042db4ade52cfe1aba1011dbc18b7a48a98e33f072915ca0a207d822f21982105906caf5997a713045c0ba1b67b72f00a5cd882694c5190dc4a9c138f65e381fafca16d6cd349acbefcb156bb74e086625908378c5c66e51b24c7f8d6e0f0e6fce939d5ba378b8c829c7cdf07156e7734da138cbbb5a92b447e33b7"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbb, 0x101}]}}]}}, {{0x9, 0x4, 0x5d, 0x6, 0xa, 0x2, 0x2, 0xff, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e003dba071"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1ff, 0x5, 0x9}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xc0, 0x24, 0x13, 0x1, "eb0046ada8d2c671f460ab27ef878e33d87a984226dbeb0858a9fcd596ab5bbf214421e6274acc4475e79542f17858bcc7e5044ba12e25f403666f198571963121f4d9d265f644d4760f5efe632043d07f334568277e4538b525cdedfb553bdaafc53c9e1ef9279b650ba33d7360539d3a7e3ba13a1ca2e72b090c363cbaedd6d7f2fe61dceabba754c311b945ddc9ff23d3572517099d8b078e9baa19bfa7bfc82233c9c2fc06f03dab439d7cda098c7a9a12633901ed6de59db9ce"}]}, @hid_hid={0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x35d}}], [{{0x9, 0x5, 0x5, 0x8, 0x3ff, 0xc2, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1c, 0xc50d}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x40, 0x3f, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x8411}, @generic={0x30, 0xc, "ae80a3e034fbdd00e036546b5da8af41b2a0f4b9eba9ddb5ef247b203462254035eac24d090df5246b05e5cf42be"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x3, 0x9, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x7, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x9f4bea469edf9587, 0x0, 0x400, 0x3, 0x8, 0x0, [@generic={0x90, 0x15, "39ac4c114bfe07c44a866b89bd6458daf3d17e930a6c4388240df881c4936f3b3f3bf37292f01ecc82a8076a4fda20c7649bdd996f6d3585506471a44356fa3f4a1fdf5603057c82dd82dc94686cfa12e364af30c99caaa137a632cf5ccc379b19057b76b2a7009fe1db306be8c89f14625b3e11498d93be229fb850e38c4a06b56a099a850730353868caefc7ce"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xf8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x8, 0x0, [@generic={0x91, 0x22, "f6ed017813645709ca4bdb51c5c33516add0ff8ed2bd6ccdc91614db35a188e2576eaba3151ec40c375972ae9bbe0fc66bc46af5a934e58b2572ad3a7f319bc093d269a44fa89f91d5b45e9fdfa7b36c8d4acb0688b5f76414b441adf8243eafc01d2e51981a6e2f7133782c2f20677ae373f400854b266529a4f7bdb2766f8ca84c71679265fa55dff4f2217a2a8c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1f, 0xaf, 0x0, [@generic={0x31, 0x23, "0e19aa91d64fc463eb3312d2b6b3c8fd1bbbd13cbafe4e732e5c7e67e16c0f9acf35a335bbd60bfd37a92c7e8e8d65"}, @generic={0x100, 0x22, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x81, 0x4, 0x40, [@generic={0xf9, 0x22, "5d9918c9338fb1309b88c4b73fcb313c685279da24f1a3eddb686464343bd2ccae92669da6d1669e48e051b1dc0037a5820797b65ea03bb29418484c596dc9709f03034c8c9df7b80ccfe839089523595f64db595dbd989246fb470e8de0f0210dcc230c832d947c2f212900466188a2b67fbe5d17c87ab79f795a7574c639e3308a32d2bfb035745779ce8b7cb826d76c7d16a285fd67a3402940fb3b5f6a41f2265b492bc8164bbfc19be7da964b0468f5cbf69d020337171d90ab820d4d2cda00b4ab25b5b20b4b58ee8dde7739a01d03bad5718c7c30e2094f0b9cf7a0d00352d25e69410ef6a9d9e928aefa3df9b5b67263e1e42e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x62, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x2b, 0x7, 0x5, 0xff, 0x1, 0x6, 0x1, [@generic={0x10, 0xf, "8b9ba995676f786e4917ddf1ff16"}], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x81, 0x40, [@generic={0xc0, 0x2, "f7b3e581fffe47cdaf822cb87e4ed6b8e5179278ad64b7965a7764039c94591ced4451f22e2b08c293dc4f5665a381ec9b72c080e87aff8174530e4c3e7eb792199fff689be996ada8076f561d525c595a5e89be8c6c9ae4d69793b526c827603b30584c393a112b6168716b46046b02640d4325e10b2a185d6e1939e39379a8ed28f26318983ced7c91c320d073852edb99f4035378dc4837f894d10a0d5aedfb7092ce6fe2fe4f0426920fd9659a583ce5864bcc2ef8bfec0b4435ef4e"}, @generic={0x6c, 0x31, "0c3838f9439e5aca26ed2a4919f5b1bbc69ad6c0f586329b8c2b2a018f3aaca317bde6ced6f3307fdca72cd929dc56bf065ea3055bd9a7a0124c49e153f43b5920a5878af426680c46c555c9809314669bee9e15207598cf00b2b81dbc1480451b1636952af81be4e0b2"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x3f, 0x40, 0x1, [@generic={0xa, 0x1, "bef619db3c839f78"}, @generic={0xb1, 0x22, "4bcab1ad504e332f803d9b27751488d66c0cd0db97dcc9e51490e7ba8ae4afa2f7aeaf15c5125a63238eb4085869e58a74e268b693dc83e16c5b5fc5279e5df81e6f794b3b30acee9ab9ddfa489d6ccf248d2404b631dd67c8f379d07686a34f87046a4c683b263f3f5a3b6b31b4d22dbee8757a46f0ed7743f2d5e86743cfac231ea77f041dcb5313ce1c095ee66b0a02a7a8732a61fa217914860acacb7555aba90b4c3005ffa38ce2316d822229"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xfe, 0xff, 0x5, [@generic={0x5b, 0x8, "e8b026fc16278f8c08755c2e2146cbbf9fa971b633cb8ca00ea7ab66645aba648b0c8e36d8a084f9578bc10a7c8ba59c07f502ee4efe39b94c5baea4f5e124281154ebc7889d2be0796742b4de2e9fad2aee426c66012c597b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x200}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x5, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0x5, 0x7, 0x40, 0x6}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fff000, 0xf00f, 0x3, [0x3f0f, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x7, 0x62}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x88, &(0x7f0000000200)=@string={0x88, 0x3, "9444b0965f1220d7b3b1236a22db6b42b2b22b866940078c72ba85e16bc33e5f5d28b427ebc00542486df0a0cc431f414dd262f8e3c1492dbc5c37f50d3a63b5b703b891d0c1c3c2938bfb122a08fc7adb2c566200e2a1025235a2c8f234651fa8b8b7fe52b7a434a97d6ba5c90f8bcd9cae75f51bb664d79d355130b571c1d6ec8e265704b7"}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "77ed4f1e743a51ec8e464afcfd5bbb60c81e342b3b76c540cd1ad51a1dddf4faee97901d2fa57ab88f307f3aecf039a62615508c0caca3cc60aabd688dd0365523e7e17c8e392ada37006b790785f637c83058f2987ebaf7332ed3b33c485ad6919292d00254eab964433b78ae3177eb59803ed71f724e6ad604bcf5b4b03e629accf46e321857b96cc1ea4ad9a974df929cd1648f4971525f5574abad6e8d9e1400ec38eee0d87f2cd7393c9920f8f0c1f862d1123f63d842"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0xb, &(0x7f0000000440)=@string={0xb, 0x3, "fc1497822736d9be88"}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "afddcacbb9cd8478c474cda9bcb66359e4dfbe0a911da071705d1cf1e0c939967bf67901b5b35cdc1761486ca42e9a4cb94a42422e3b2c2c910848df46141aa56c7d8cfdbb937f855cb92d0ccc5935cdd089e25b575d80ca695fdd670f2bf59ed068a029e3581d13e54c590219c82a025af352f6b24cb0f3b02a3ec5bed6521926d15446c33adc4d1fe0434ba17d15240dcdffa4c74ea824c505c87044859575d4895eccfebef5b1132ccf6e39d2"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x20, 0xc, 0x3, {0x3, 0x4, 'b'}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x29, 0xd9, "ae164f9213008021a3d80d5894d77960a0364e441dc1677209da13fead993a699373a9a2ffe98be1f2bb291244628ff552220d8c05362f538b2779a1b8410773327ddda6b4b8ca0d92ad0d59d8c8c9dbfa9975a509d3bd7f61b168fe01704dfbd4fffcf0ef249344f1711d171f47a9e35fbc752188aeeecfd4be8e9bec78429959aa1425fe12dd490dd93a816b6c17161eff0e82ea8382aa32cf39ecd94781794db6040a3bc6e4b5b20ef4c75378bee28d0e37d9a8da400b6ad5a9519bd20dccbe9c69c501b900b607d4a2c51b4f41eefd7ef8e1a24cd3f583"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000840)={0x0, 0x8, 0x1}}) r3 = io_uring_setup(0x6b0d, &(0x7f0000000c40)={0x0, 0x8850}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x16, &(0x7f0000000340)=[{&(0x7f0000000040)=""/244, 0xf4}], 0x1) (async) io_uring_enter(r3, 0x867, 0x3145, 0x2, &(0x7f00000000c0)={[0x5]}, 0x8) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) r6 = dup3(r0, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000002000)=ANY=[@ANYBLOB="a8a440000102030109021b0001010ad0070904004f010701fb0709050102400004044034990117f24b2ba80f7f94776314ba00"/60], &(0x7f0000001fc0)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x300, 0x2, 0xff, 0xa, 0x8, 0x6}, 0xc5, &(0x7f0000001d80)={0x5, 0xf, 0xc5, 0x1, [@generic={0xc0, 0x10, 0x4, "cc8c4b37a22094c500f260f4df09f65411efaaab4e1f1517a27ac45b6ad38e9c5cfd1b751efd88acdf51970b8000dbcfd4bf15bbe60f2a2f910a67a0064534a3e4abbded8f541a8914d6d691d2be4ffd9bef041aa488bfaee2547f6c07f797b9f471bd4d008829b7216ed06b9fde5f5861a39b3a85ed08da01722ce085e50d006f77980b727e44989ed6b0e9605f141d77d2448a360b8db5bc7c84396d31e5f31bdd88f27cb84dcd0036f0b35e320fe58eead6254b7281cf7c42f1d38d"}]}, 0x2, [{0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x44b}}, {0xfb, &(0x7f0000001ec0)=@string={0xfb, 0x3, "51628c5bcadd65204a5d4175e5d79342a75024f010001f145434f0b9197611c3833c9beba4e6f6056d201c29d26f8cb11d5b9477e49a18bc880f73e06c465cbc051ff0574b60cec3e4b703539e73ecd92397bfac38c7d0c29116527c42a129c4d9dde5ed3370d1279b8c8f4d3818be404b2765f7aaa8b9c033ebf48486067a41a53f6d5552e8d7fb6b0c795ebe82f2542ce7fc187d0dbd39419299a39e4bcfc68ab0c8f0602cdfd79fee06bb1c96a1d3e6c4df65cd2bbf72615c1b3e894cac4fbdddcb66b1db6e8dd7624ff3b5755429865cd30fb51a9ab2e3d37e713fae80536d5ea1c63a5e0d48b0def363528bda65e2286ac937b73a91fe"}}]}) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x9b, 0x4) (async, rerun: 32) semget$private(0x0, 0x1, 0x0) 13:28:20 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) 13:28:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:28:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xf4010000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:20 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/149, 0x95}], 0x1, 0x1, 0x0) 13:28:20 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0xc, r3}) [ 1087.790897][T23557] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1087.828084][T23559] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:28:20 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/149, 0x95}], 0x1, 0x1, 0x0) [ 1087.888862][T23557] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1087.944920][T23572] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f00000001c0)="bbd953a398dc31e392e5fbc0729984d1d8970b0213d7dbbfde4adf1378a4e5c160e4a8eaab1170f9dc7f257d19375adea5836760d7b404268f3c1b7f692b0576a0c437eb2425fb379f5e2451768c8b857c2710e6496a7946a57f783f073535828c9f75be65573f6576d51aa9b4ab480a3e41c6d28c6f4aa21debf4eded7902dad525b84c8f483d3c8edc4e7125438dfc4238c02abe1f3b375fddb9fd3086ed0593388e9439580a8c1f715959dad5597e21d485f336d64d16850b12f9ef66", 0xbe, 0x547}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:20 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) 13:28:20 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/149, 0x95}], 0x1, 0x1, 0x0) [ 1088.183591][T17183] usb 5-1: new high-speed USB device number 45 using dummy_hcd 13:28:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/42, 0x2a}], 0x3, 0x101, 0x4) [ 1088.226945][T23581] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:21 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0xc, r3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) dup(r6) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0xc, r3}) (async) [ 1088.343273][T23580] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1088.393869][T17183] usb 5-1: device descriptor read/64, error -71 [ 1088.478203][T23594] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1088.552520][T23597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1088.684358][T17183] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1088.883617][T17183] usb 5-1: device descriptor read/64, error -71 [ 1089.013756][T17183] usb usb5-port1: attempt power cycle [ 1089.453519][T17183] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1089.549026][T17183] usb 5-1: device descriptor read/8, error -71 [ 1089.823464][T17183] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1089.918864][T17183] usb 5-1: device descriptor read/8, error -71 [ 1090.046609][T17183] usb usb5-port1: unable to enumerate USB device 13:28:23 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x23d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x3, 0x87}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x83, 0x40, 0x0, 0x20}, 0x2c, &(0x7f00000009c0)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0x1ef0f, 0x8, [0xff0000, 0xff0030, 0x0, 0xff0000, 0xff000f, 0x3fcf]}]}, 0x6, [{0xa0, &(0x7f0000000a00)=@string={0xa0, 0x3, "1e9a0511763991df288f80a401ca9ba12b93f825ac0dc0aff3a85c67e2e6a7f2a5a552dd136ecdab373a74c766f7d8d80430108c4684f2f97419b73290275008b159a45e7df05529546122704a9bfdcc7746cd4c64134d14f8119c4141b32194ce946e4fb3193c96072e2300d53bf9261d558f9ee8bcaab62f84df6585be6f3a70c4a8e4d2ffdad1b4821eb55194a0d03e4d28966c21a0487e40c068673e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x404}}, {0x6d, &(0x7f0000000b00)=@string={0x6d, 0x3, "1d6284175eb0b16bd2baa5c8979be6e4d3a8efc2d535eb2e1c4281a5bccbf23a8ff21c17870f3f6465e402282eea1c7ededf46d19725559e7c60b0a681bcf79a6600ed57e7fc8ede12721c0e74c59ff8072d4c40609ecc25d434f42ec630d432dbfb7979f617a89d76d41f"}}, {0x2e, &(0x7f0000000b80)=@string={0x2e, 0x3, "feac2e6a7d7e23faac3deefe887caf0a864b5285e67f4bdef5c1ef9e7a3079a12ad7380396e4a6a0cab7eabd"}}, {0xc0, &(0x7f0000001bc0)=@string={0xc0, 0x3, "229f8d270ae782e63f219e7e4a4879888f86defaa5f75ad899c15763206f2e144018f83a61019e6db516f1f396ae4dfc5e539c5ad44e7e94be449be6730d620975066ce4742a2c53786acd4508fc5c33675c6375b669210a0c667de8d92e8beb413884204b2545de4b4de13f7ab88ec1afbfd8d0e6a9b4d7e5358066d35b300eb3d9bdbb5273b86a26c4719b2c2bf5e465b53a75f0ce822bc4e680e8c03b755ad2f5c44e139b12007a81af4fd77f4ed8e9d1828b9e0c62df24f0961847d8"}}, {0x73, &(0x7f0000000bc0)=@string={0x73, 0x3, "e7a3c6b66d3260b8aa1b019265d34d0d5929dfa3357e7bc255f52f320a598d2d68a790c49ab4d7db393deb462a3cc4f129ebca7053218a2d1ab25526612d56b9360b922b30d3f97eda461707bde8898e4cc4a249bff7005ebba490c1820b67b8165f9ea7c2f67ac5555089cc7defc333c0"}}]}) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000f068320401c34051ad8000000010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4b08e7b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = syz_usb_connect(0x1, 0xef5, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x91, 0x16, 0x98, 0x0, 0x2100, 0x9e58, 0x6a17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee3, 0x4, 0x2, 0x8, 0xb0, 0xff, [{{0x9, 0x4, 0x96, 0xde, 0x2, 0xa4, 0x4e, 0x6b, 0xc9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x71b, 0x0, 0xa2}, [@ncm={0x6, 0x24, 0x1a, 0xa5a2, 0x14}]}, @uac_control={{0xa, 0x24, 0x1, 0x20, 0xb}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x1, 0x8], 0x1}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x8e6, 0x7f, "a6a0bd2b"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x5, 0x9, 'c'}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0x40, 0x7, [@generic={0xbc, 0x2, "7bb2b33be9a53b4d7e64c9e3eabe92acb6b1df6b1604a8c79ead24c869bf9abe3a7ccc873ca2e7c138e2a7f015846c095557474c3033111d40dd709949ffc4e556f024f323087b5fb15dcb51021e10a75bae80ff7120f26a95ccfc3f6fb0fd5b22f82082d8da416721afd7136f84e5d5c48cfff5479907000e80f9c4c57379ef68d0e45402a1a6c686bdd255d63f2cbd505b02ac7931126a3e0e66b81e158094b405654b5e4184112e5fff6cf66e533c4bf964494849e610dd0d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x2, 0x3f, [@generic={0x1b, 0x22, "0878a942305c4ecda33c38c701a83a9bb27bfc1c21347fa396"}]}}]}}, {{0x9, 0x4, 0x42, 0x9, 0xf, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x77, 0x4}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0xb80, 0xff, "993ebbd1"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x4, 0x3, 0x1], 0x81}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x2, 0x1, [0x4], 0xfa}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x4, 0xb9, 0x4, 0x0, 0x99}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x81, "129a5e"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x20, "8afa"}]}, @hid_hid={0x9, 0x21, 0xff34, 0xfd, 0x1, {0x22, 0x68e}}], [{{0x9, 0x5, 0x7, 0x4, 0x10, 0x81, 0xbf, 0x8, [@generic={0x7d, 0x3, "bc7a757d5a51808f2b18c96a59f12f785fa1464c4b9566f3a66900c1313bb8ead0078f4a25143238bf6262d244fdcf40df200eb3ee5493653db9df7acaefff3c2ffd49048394c886a8feca87def4ad381425e5f3a830543698a70561253a7096428fb5d63fe1a8b1311a83111e06b74c1706779a9b335c73158308"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x89, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x400}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xad, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x4, 0x80, [@generic={0xe8, 0x2, "14ca96222876a297c65745ff8017dd375b6e2030b1b040a82ff2cad10cebda75e951c0d3cc76112eb3a13b15883daec199681c39a4a9690cbed869a4226b526e52b79910ac47b83b10ad9c79231a61e1f6325d0c0f7fea3cc897933c75f6fff23e1e464483c41fff07818ac5f4063138999b43b24fddce8f694995f6eff260876543d8327307b8df2433e6de25b5693c6ef129b428b3e412000ed3c9c715bf666f9a509e9190cc9df317046a8e77fff8ee03933c4e6045a62b17983993a697fe319308f7831b0cc0a250e5c392917cf04af4d834ff0d4e92c0cbf3fdd1a92c569f86a09bc1ca"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x12, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x20}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7f, 0x0, 0x0, [@generic={0x7d, 0xc, "bece3959232a3c976e0c39cd163f8f25f5d42a45c64723bf584161974efcc47448f4beb1eca64f5a4652637ec5159250b6eb735a44bfae725c4d2f79f137faea663b537ccd008ee91b509e00cb223365fd7e3c859b987b9795d6d9fcddf374c6fe346957900257676e082eae02004a02c7111a43fb3821f89c5c18"}, @generic={0xc1, 0x21, "a72943392be353c26ae19caedbc9487cd7dfd9453911072c2bc65a9cfcca0a2b1724a667eeb70746af30cd43499b4c702d688146acc070b143ee28207c14f9a31ced9b0d400002664f95cf8880fdd55d9507ef6205d35fbe6f1bba668883170a15e933558aea8d1570fd71def7978e7c9811e87b704a58d90aff32c1c6da73f8f36454f5071832d7841b9d0a092ce80dfbcafa36007a73591d34c2680d6703583e105d6a4b35fad928ef93fc458b262c191f0cd6000a87fb937190e79e3c91"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x6, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x3f, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc6, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xe085}]}}, {{0x9, 0x5, 0x5, 0x1e, 0x3ff, 0x80, 0x92, 0x2, [@generic={0x39, 0x7, "471710b4d9f2ec354c572707cd80733e7905d15511daa7b2af4de6dd901c0aaf6b7b9650a28f1ac7c444d37336f61a8cd79c61b5ca98cf"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x4, 0x20, 0xf6, [@generic={0x6f, 0x13, "e6ba5cfd490246172bfb70af1f5bdde850a37f3a0afb11f04c9d655e44aeec7e68967e3e0d3b369a62d0d77e03c9e0f035f7c8e2bc74b7bf63950d187653ed1a8d946b8404f0767e66594071db78bf198ebedfd9ce6ac25bf74c82507af80eb0baae2b612da72d15de5750f527"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xff, 0x3, 0x7, [@generic={0x76, 0xd, "d3f4e3b479dcb9b8300ddcdb53dcb5de489af47722850bcacc4caa8a9d486dcf4f79a4ab2ee27c5f23633f03e99637048ae4143cafe00999eca124be2fefa104713db26c54960c7a16c5aac89d22dcc68fb184c8fe2420d200ef968d6e79907564bcadee2de4d063fd88c9e2b46e938e6401c1b2"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xfa, 0xd1, 0x81, [@generic={0x52, 0x5, "bc91d85b292d31212ec7bae3a9331f497273576301e409514847e8727cf33856734eda8e13639f03f8cb8727c09508149895557f2d8f7a924fde7aa9d0c08ab5717c0e7da76df4aa1b62df1d5a186fc8"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x2, 0x80, 0x4f, [@generic={0xe6, 0xe, "c21dbe113d7b11fa973149e3ed27ab44ff0e25bb5bf9d609a9028dc0d2affd90529c7745e4e742b6e9aba1f33fd067ab76bd6f4c96262770d401ece02a68f9f3a70d7ff10eff82e8fae6d3689778746b4467ea10a36f7f5aaeddcd8cc47a6fa0234a69cfdddbbc5b2042db4ade52cfe1aba1011dbc18b7a48a98e33f072915ca0a207d822f21982105906caf5997a713045c0ba1b67b72f00a5cd882694c5190dc4a9c138f65e381fafca16d6cd349acbefcb156bb74e086625908378c5c66e51b24c7f8d6e0f0e6fce939d5ba378b8c829c7cdf07156e7734da138cbbb5a92b447e33b7"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbb, 0x101}]}}]}}, {{0x9, 0x4, 0x5d, 0x6, 0xa, 0x2, 0x2, 0xff, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e003dba071"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1ff, 0x5, 0x9}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xc0, 0x24, 0x13, 0x1, "eb0046ada8d2c671f460ab27ef878e33d87a984226dbeb0858a9fcd596ab5bbf214421e6274acc4475e79542f17858bcc7e5044ba12e25f403666f198571963121f4d9d265f644d4760f5efe632043d07f334568277e4538b525cdedfb553bdaafc53c9e1ef9279b650ba33d7360539d3a7e3ba13a1ca2e72b090c363cbaedd6d7f2fe61dceabba754c311b945ddc9ff23d3572517099d8b078e9baa19bfa7bfc82233c9c2fc06f03dab439d7cda098c7a9a12633901ed6de59db9ce"}]}, @hid_hid={0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x35d}}], [{{0x9, 0x5, 0x5, 0x8, 0x3ff, 0xc2, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1c, 0xc50d}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x40, 0x3f, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x8411}, @generic={0x30, 0xc, "ae80a3e034fbdd00e036546b5da8af41b2a0f4b9eba9ddb5ef247b203462254035eac24d090df5246b05e5cf42be"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x3, 0x9, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x7, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x9f4bea469edf9587, 0x0, 0x400, 0x3, 0x8, 0x0, [@generic={0x90, 0x15, "39ac4c114bfe07c44a866b89bd6458daf3d17e930a6c4388240df881c4936f3b3f3bf37292f01ecc82a8076a4fda20c7649bdd996f6d3585506471a44356fa3f4a1fdf5603057c82dd82dc94686cfa12e364af30c99caaa137a632cf5ccc379b19057b76b2a7009fe1db306be8c89f14625b3e11498d93be229fb850e38c4a06b56a099a850730353868caefc7ce"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xf8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x8, 0x0, [@generic={0x91, 0x22, "f6ed017813645709ca4bdb51c5c33516add0ff8ed2bd6ccdc91614db35a188e2576eaba3151ec40c375972ae9bbe0fc66bc46af5a934e58b2572ad3a7f319bc093d269a44fa89f91d5b45e9fdfa7b36c8d4acb0688b5f76414b441adf8243eafc01d2e51981a6e2f7133782c2f20677ae373f400854b266529a4f7bdb2766f8ca84c71679265fa55dff4f2217a2a8c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1f, 0xaf, 0x0, [@generic={0x31, 0x23, "0e19aa91d64fc463eb3312d2b6b3c8fd1bbbd13cbafe4e732e5c7e67e16c0f9acf35a335bbd60bfd37a92c7e8e8d65"}, @generic={0x100, 0x22, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x81, 0x4, 0x40, [@generic={0xf9, 0x22, "5d9918c9338fb1309b88c4b73fcb313c685279da24f1a3eddb686464343bd2ccae92669da6d1669e48e051b1dc0037a5820797b65ea03bb29418484c596dc9709f03034c8c9df7b80ccfe839089523595f64db595dbd989246fb470e8de0f0210dcc230c832d947c2f212900466188a2b67fbe5d17c87ab79f795a7574c639e3308a32d2bfb035745779ce8b7cb826d76c7d16a285fd67a3402940fb3b5f6a41f2265b492bc8164bbfc19be7da964b0468f5cbf69d020337171d90ab820d4d2cda00b4ab25b5b20b4b58ee8dde7739a01d03bad5718c7c30e2094f0b9cf7a0d00352d25e69410ef6a9d9e928aefa3df9b5b67263e1e42e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x62, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x2b, 0x7, 0x5, 0xff, 0x1, 0x6, 0x1, [@generic={0x10, 0xf, "8b9ba995676f786e4917ddf1ff16"}], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x81, 0x40, [@generic={0xc0, 0x2, "f7b3e581fffe47cdaf822cb87e4ed6b8e5179278ad64b7965a7764039c94591ced4451f22e2b08c293dc4f5665a381ec9b72c080e87aff8174530e4c3e7eb792199fff689be996ada8076f561d525c595a5e89be8c6c9ae4d69793b526c827603b30584c393a112b6168716b46046b02640d4325e10b2a185d6e1939e39379a8ed28f26318983ced7c91c320d073852edb99f4035378dc4837f894d10a0d5aedfb7092ce6fe2fe4f0426920fd9659a583ce5864bcc2ef8bfec0b4435ef4e"}, @generic={0x6c, 0x31, "0c3838f9439e5aca26ed2a4919f5b1bbc69ad6c0f586329b8c2b2a018f3aaca317bde6ced6f3307fdca72cd929dc56bf065ea3055bd9a7a0124c49e153f43b5920a5878af426680c46c555c9809314669bee9e15207598cf00b2b81dbc1480451b1636952af81be4e0b2"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x3f, 0x40, 0x1, [@generic={0xa, 0x1, "bef619db3c839f78"}, @generic={0xb1, 0x22, "4bcab1ad504e332f803d9b27751488d66c0cd0db97dcc9e51490e7ba8ae4afa2f7aeaf15c5125a63238eb4085869e58a74e268b693dc83e16c5b5fc5279e5df81e6f794b3b30acee9ab9ddfa489d6ccf248d2404b631dd67c8f379d07686a34f87046a4c683b263f3f5a3b6b31b4d22dbee8757a46f0ed7743f2d5e86743cfac231ea77f041dcb5313ce1c095ee66b0a02a7a8732a61fa217914860acacb7555aba90b4c3005ffa38ce2316d822229"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xfe, 0xff, 0x5, [@generic={0x5b, 0x8, "e8b026fc16278f8c08755c2e2146cbbf9fa971b633cb8ca00ea7ab66645aba648b0c8e36d8a084f9578bc10a7c8ba59c07f502ee4efe39b94c5baea4f5e124281154ebc7889d2be0796742b4de2e9fad2aee426c66012c597b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x200}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x5, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x81, 0x5, 0x7, 0x40, 0x6}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fff000, 0xf00f, 0x3, [0x3f0f, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x7, 0x62}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x88, &(0x7f0000000200)=@string={0x88, 0x3, "9444b0965f1220d7b3b1236a22db6b42b2b22b866940078c72ba85e16bc33e5f5d28b427ebc00542486df0a0cc431f414dd262f8e3c1492dbc5c37f50d3a63b5b703b891d0c1c3c2938bfb122a08fc7adb2c566200e2a1025235a2c8f234651fa8b8b7fe52b7a434a97d6ba5c90f8bcd9cae75f51bb664d79d355130b571c1d6ec8e265704b7"}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "77ed4f1e743a51ec8e464afcfd5bbb60c81e342b3b76c540cd1ad51a1dddf4faee97901d2fa57ab88f307f3aecf039a62615508c0caca3cc60aabd688dd0365523e7e17c8e392ada37006b790785f637c83058f2987ebaf7332ed3b33c485ad6919292d00254eab964433b78ae3177eb59803ed71f724e6ad604bcf5b4b03e629accf46e321857b96cc1ea4ad9a974df929cd1648f4971525f5574abad6e8d9e1400ec38eee0d87f2cd7393c9920f8f0c1f862d1123f63d842"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0xb, &(0x7f0000000440)=@string={0xb, 0x3, "fc1497822736d9be88"}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "afddcacbb9cd8478c474cda9bcb66359e4dfbe0a911da071705d1cf1e0c939967bf67901b5b35cdc1761486ca42e9a4cb94a42422e3b2c2c910848df46141aa56c7d8cfdbb937f855cb92d0ccc5935cdd089e25b575d80ca695fdd670f2bf59ed068a029e3581d13e54c590219c82a025af352f6b24cb0f3b02a3ec5bed6521926d15446c33adc4d1fe0434ba17d15240dcdffa4c74ea824c505c87044859575d4895eccfebef5b1132ccf6e39d2"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x20, 0xc, 0x3, {0x3, 0x4, 'b'}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x29, 0xd9, "ae164f9213008021a3d80d5894d77960a0364e441dc1677209da13fead993a699373a9a2ffe98be1f2bb291244628ff552220d8c05362f538b2779a1b8410773327ddda6b4b8ca0d92ad0d59d8c8c9dbfa9975a509d3bd7f61b168fe01704dfbd4fffcf0ef249344f1711d171f47a9e35fbc752188aeeecfd4be8e9bec78429959aa1425fe12dd490dd93a816b6c17161eff0e82ea8382aa32cf39ecd94781794db6040a3bc6e4b5b20ef4c75378bee28d0e37d9a8da400b6ad5a9519bd20dccbe9c69c501b900b607d4a2c51b4f41eefd7ef8e1a24cd3f583"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000840)={0x0, 0x8, 0x1}}) (async) r3 = io_uring_setup(0x6b0d, &(0x7f0000000c40)={0x0, 0x8850}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x16, &(0x7f0000000340)=[{&(0x7f0000000040)=""/244, 0xf4}], 0x1) (async) io_uring_enter(r3, 0x867, 0x3145, 0x2, &(0x7f00000000c0)={[0x5]}, 0x8) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) r6 = dup3(r0, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000002000)=ANY=[@ANYBLOB="a8a440000102030109021b0001010ad0070904004f010701fb0709050102400004044034990117f24b2ba80f7f94776314ba00"/60], &(0x7f0000001fc0)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x300, 0x2, 0xff, 0xa, 0x8, 0x6}, 0xc5, &(0x7f0000001d80)={0x5, 0xf, 0xc5, 0x1, [@generic={0xc0, 0x10, 0x4, "cc8c4b37a22094c500f260f4df09f65411efaaab4e1f1517a27ac45b6ad38e9c5cfd1b751efd88acdf51970b8000dbcfd4bf15bbe60f2a2f910a67a0064534a3e4abbded8f541a8914d6d691d2be4ffd9bef041aa488bfaee2547f6c07f797b9f471bd4d008829b7216ed06b9fde5f5861a39b3a85ed08da01722ce085e50d006f77980b727e44989ed6b0e9605f141d77d2448a360b8db5bc7c84396d31e5f31bdd88f27cb84dcd0036f0b35e320fe58eead6254b7281cf7c42f1d38d"}]}, 0x2, [{0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x44b}}, {0xfb, &(0x7f0000001ec0)=@string={0xfb, 0x3, "51628c5bcadd65204a5d4175e5d79342a75024f010001f145434f0b9197611c3833c9beba4e6f6056d201c29d26f8cb11d5b9477e49a18bc880f73e06c465cbc051ff0574b60cec3e4b703539e73ecd92397bfac38c7d0c29116527c42a129c4d9dde5ed3370d1279b8c8f4d3818be404b2765f7aaa8b9c033ebf48486067a41a53f6d5552e8d7fb6b0c795ebe82f2542ce7fc187d0dbd39419299a39e4bcfc68ab0c8f0602cdfd79fee06bb1c96a1d3e6c4df65cd2bbf72615c1b3e894cac4fbdddcb66b1db6e8dd7624ff3b5755429865cd30fb51a9ab2e3d37e713fae80536d5ea1c63a5e0d48b0def363528bda65e2286ac937b73a91fe"}}]}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x9b, 0x4) (async) semget$private(0x0, 0x1, 0x0) 13:28:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xff000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/42, 0x2a}], 0x3, 0x101, 0x4) 13:28:23 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) 13:28:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) (async) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f00000001c0)="bbd953a398dc31e392e5fbc0729984d1d8970b0213d7dbbfde4adf1378a4e5c160e4a8eaab1170f9dc7f257d19375adea5836760d7b404268f3c1b7f692b0576a0c437eb2425fb379f5e2451768c8b857c2710e6496a7946a57f783f073535828c9f75be65573f6576d51aa9b4ab480a3e41c6d28c6f4aa21debf4eded7902dad525b84c8f483d3c8edc4e7125438dfc4238c02abe1f3b375fddb9fd3086ed0593388e9439580a8c1f715959dad5597e21d485f336d64d16850b12f9ef66", 0xbe, 0x547}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:23 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f00000001c0), 0xaa7, 0x101000) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff9ddb34e288460f23aefc0f17ffff9100077127e87d72f2ae97ace5d543600f9894e7f6e2266960193d1ba40fc5608f5eb5c53d1ad42ec692eb4b74"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) pidfd_getfd(r7, r4, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:28:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/42, 0x2a}], 0x3, 0x101, 0x4) [ 1090.922685][T23610] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1090.951449][T23612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.981334][T23608] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1090.988716][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.024933][T23612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.036853][T23609] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1091.056319][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.077553][T23609] CPU: 1 PID: 23609 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1091.088057][T23609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1091.098170][T23609] Call Trace: [ 1091.101495][T23609] [ 1091.104551][T23609] dump_stack_lvl+0x125/0x1b0 [ 1091.109292][T23609] sysfs_warn_dup+0x7f/0xa0 [ 1091.113959][T23609] sysfs_create_dir_ns+0x247/0x2a0 [ 1091.115113][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.119114][T23609] ? sysfs_create_mount_point+0xb0/0xb0 [ 1091.133130][T23609] ? spin_bug+0x1d0/0x1d0 [ 1091.137530][T23609] ? do_raw_spin_unlock+0x173/0x230 [ 1091.142798][T23609] kobject_add_internal+0x2c8/0x960 [ 1091.148069][T23609] kobject_add+0x16f/0x240 [ 1091.152720][T23609] ? kset_create_and_add+0x190/0x190 [ 1091.158090][T23609] ? kobject_put+0xbe/0x440 [ 1091.162660][T23609] ? bus_get_dev_root+0x5e/0x80 [ 1091.167583][T23609] device_add+0x289/0x1aa0 [ 1091.172048][T23609] ? device_initialize+0x510/0x510 [ 1091.177213][T23609] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1091.184106][T23609] ? __init_waitqueue_head+0xca/0x150 [ 1091.189527][T23609] iommufd_test+0x1c47/0x2e60 [ 1091.194339][T23609] ? reacquire_held_locks+0x4b0/0x4b0 [ 1091.199933][T23609] ? iommufd_selftest_destroy+0x100/0x100 [ 1091.205693][T23609] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1091.210759][T23609] iommufd_fops_ioctl+0x347/0x4d0 [ 1091.215870][T23609] ? iommufd_destroy+0x180/0x180 [ 1091.220875][T23609] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1091.225865][T23609] ? iommufd_destroy+0x180/0x180 [ 1091.230841][T23609] __x64_sys_ioctl+0x18f/0x210 [ 1091.235663][T23609] do_syscall_64+0x38/0xb0 [ 1091.240123][T23609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1091.246066][T23609] RIP: 0033:0x7f29a6e7cae9 [ 1091.250513][T23609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1091.270251][T23609] RSP: 002b:00007f29a7c1d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1091.278749][T23609] RAX: ffffffffffffffda RBX: 00007f29a6f9bf80 RCX: 00007f29a6e7cae9 [ 1091.286762][T23609] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1091.294766][T23609] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1091.302767][T23609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.310766][T23609] R13: 000000000000000b R14: 00007f29a6f9bf80 R15: 00007f29a70bfa48 [ 1091.318783][T23609] [ 1091.339512][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.357357][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.366719][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.405109][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.408559][T23609] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1091.444990][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:28:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/142, 0x8e}], 0x1, 0x8001, 0x7) 13:28:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$mouse(&(0x7f00000001c0), 0xaa7, 0x101000) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r5}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff9ddb34e288460f23aefc0f17ffff9100077127e87d72f2ae97ace5d543600f9894e7f6e2266960193d1ba40fc5608f5eb5c53d1ad42ec692eb4b74"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) pidfd_getfd(r7, r4, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:28:24 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) r4 = semget$private(0x0, 0x1, 0x30) semop(r4, &(0x7f0000000140)=[{0x4, 0x3, 0x1800}, {0x2, 0x9, 0x1000}, {0x3, 0x8, 0x800}, {0x3, 0x400, 0x1000}], 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast2, 0x7fffffff}, 0x1c) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r8}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1091.525187][T17183] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1091.543361][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1091.624618][T23628] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1091.638333][T23630] iommufd_mock iommufd_mock3: Adding to iommu group 1 13:28:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f00000001c0), 0xaa7, 0x101000) (async) r4 = syz_open_dev$mouse(&(0x7f00000001c0), 0xaa7, 0x101000) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r5}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ff9ddb34e288460f23aefc0f17ffff9100077127e87d72f2ae97ace5d543600f9894e7f6e2266960193d1ba40fc5608f5eb5c53d1ad42ec692eb4b74"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) pidfd_getfd(r7, r4, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) 13:28:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xffffff8d, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/142, 0x8e}], 0x1, 0x8001, 0x7) 13:28:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r8}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f00000001c0)="bbd953a398dc31e392e5fbc0729984d1d8970b0213d7dbbfde4adf1378a4e5c160e4a8eaab1170f9dc7f257d19375adea5836760d7b404268f3c1b7f692b0576a0c437eb2425fb379f5e2451768c8b857c2710e6496a7946a57f783f073535828c9f75be65573f6576d51aa9b4ab480a3e41c6d28c6f4aa21debf4eded7902dad525b84c8f483d3c8edc4e7125438dfc4238c02abe1f3b375fddb9fd3086ed0593388e9439580a8c1f715959dad5597e21d485f336d64d16850b12f9ef66", 0xbe, 0x547}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x8400, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f00000001c0)="bbd953a398dc31e392e5fbc0729984d1d8970b0213d7dbbfde4adf1378a4e5c160e4a8eaab1170f9dc7f257d19375adea5836760d7b404268f3c1b7f692b0576a0c437eb2425fb379f5e2451768c8b857c2710e6496a7946a57f783f073535828c9f75be65573f6576d51aa9b4ab480a3e41c6d28c6f4aa21debf4eded7902dad525b84c8f483d3c8edc4e7125438dfc4238c02abe1f3b375fddb9fd3086ed0593388e9439580a8c1f715959dad5597e21d485f336d64d16850b12f9ef66", 0xbe, 0x547}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) [ 1091.810621][T23638] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1091.850659][T23639] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfa}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/142, 0x8e}], 0x1, 0x8001, 0x7) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/142, 0x8e}], 0x1, 0x8001, 0x7) [ 1091.946184][T23645] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1092.037625][T23655] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1092.057493][T17183] usb 5-1: device descriptor read/64, error -32 13:28:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x38, 0x2, r8}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:24 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="8aadc727b749d1e7cf4eb2eae0d7735edbf0f2063fcc979f621ea73eace52747b0b732934bc711e2fbefd71191bd7413863d6b2056d66632a9058ea20d4645a8105f465b0710f1adf74bebc5891c08e48f71f528", 0x54}, {&(0x7f00000001c0)="a82934e9fc1e9136df52c9ce9557efdb60d6", 0x12}, {&(0x7f0000000200)="045b55d4d5e929789766e5315ffab6aec2fc5aad33bddf916cc9ec4e51bab95ae80980d4908a9d8949d8f30a0ec2bcf4eea72b5c9c661f33f3c4dfd49681ba916dc5046d1e334001cd1c51fb07f8751afef05a", 0x53}, {&(0x7f0000000280)="69b32f73ec67ec0938b1398bfb813c86c6cea3726efbdadabf454d71247281d69e371bf21efc38977fda19743706f0ef39ca12bc8c9fb50cb0921b8f00ada11d392c7fcb7dd7c619a10373a945852c734b9ab499df39272479ce9374e2c645080eac0fd8fb4db80258a1d37ac37171779d41d10f68dba8e36415ba2d6cfdfabfca6dab4df2a158222bcd2eed4c2e775d97efb64f36fb1449ff0150f6129f5a", 0x9f}, {&(0x7f0000000340)="9f238cd53023f49834fc825bebd76844fda11ec0fb5c46c1f4ebd74ecee726e25c623852a6a6cdc9be90b5d437c4ad42a6affbe735e135703356c326eda54f1086b701576937f491053363ab5af1e18d1f52e948c83b6a8e", 0x58}, {&(0x7f00000003c0)="6a1776b3c43f0772759ffbf9645d8af1e9ca35c9160db8d179c7305838abe5660e64307179705861e4711347ba0a096b8b31a7bfaa2ee4c40f8b5eb9d1244466664f5ca487c25f80efd539f5a1ea0b72ff8234ac8d61c0c7d2db9929528bb2077b8c6f1759666701681799501afa7457899dd9bd657d112c8f3a859d24dc519bd033be065cbef091f1d9d239993ba3abe73167b82540e580ca6375354e205841d7db3e854e388736054ac634e0d8c454ed8f4c6c932537c3eef3d761a17e5c4433131e6bb30b0e8419afd36ed77f69ff5d8c39087cb8c394e25735", 0xdb}], 0x6, 0x0, 0x0, 0x80}}], 0x1, 0x44880) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1092.091240][T23658] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1092.148123][T23658] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1092.159071][T23662] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1092.177317][T23662] CPU: 1 PID: 23662 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1092.187821][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1092.198014][T23662] Call Trace: [ 1092.201334][T23662] [ 1092.204306][T23662] dump_stack_lvl+0x125/0x1b0 [ 1092.209044][T23662] sysfs_warn_dup+0x7f/0xa0 [ 1092.213621][T23662] sysfs_create_dir_ns+0x247/0x2a0 [ 1092.218800][T23662] ? sysfs_create_mount_point+0xb0/0xb0 [ 1092.224424][T23662] ? spin_bug+0x1d0/0x1d0 [ 1092.228832][T23662] ? do_raw_spin_unlock+0x173/0x230 [ 1092.234105][T23662] kobject_add_internal+0x2c8/0x960 [ 1092.239351][T23662] kobject_add+0x16f/0x240 [ 1092.243802][T23662] ? kset_create_and_add+0x190/0x190 [ 1092.249126][T23662] ? kobject_put+0xbe/0x440 [ 1092.253664][T23662] ? bus_get_dev_root+0x5e/0x80 [ 1092.258579][T23662] device_add+0x289/0x1aa0 [ 1092.263032][T23662] ? device_initialize+0x510/0x510 [ 1092.268191][T23662] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1092.275086][T23662] ? __init_waitqueue_head+0xca/0x150 [ 1092.280503][T23662] iommufd_test+0x1c47/0x2e60 [ 1092.285221][T23662] ? reacquire_held_locks+0x4b0/0x4b0 [ 1092.290643][T23662] ? iommufd_selftest_destroy+0x100/0x100 [ 1092.296398][T23662] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1092.301468][T23662] iommufd_fops_ioctl+0x347/0x4d0 [ 1092.306529][T23662] ? iommufd_destroy+0x180/0x180 [ 1092.311515][T23662] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1092.316506][T23662] ? iommufd_destroy+0x180/0x180 [ 1092.321479][T23662] __x64_sys_ioctl+0x18f/0x210 [ 1092.326282][T23662] do_syscall_64+0x38/0xb0 [ 1092.330729][T23662] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1092.336681][T23662] RIP: 0033:0x7f798a67cae9 [ 1092.341124][T23662] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1092.360768][T23662] RSP: 002b:00007f798b3450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.369215][T23662] RAX: ffffffffffffffda RBX: 00007f798a79bf80 RCX: 00007f798a67cae9 [ 1092.377303][T23662] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1092.385298][T23662] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1092.393295][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.401295][T23662] R13: 000000000000000b R14: 00007f798a79bf80 R15: 00007f798a8bfa48 [ 1092.409312][T23662] 13:28:25 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="8aadc727b749d1e7cf4eb2eae0d7735edbf0f2063fcc979f621ea73eace52747b0b732934bc711e2fbefd71191bd7413863d6b2056d66632a9058ea20d4645a8105f465b0710f1adf74bebc5891c08e48f71f528", 0x54}, {&(0x7f00000001c0)="a82934e9fc1e9136df52c9ce9557efdb60d6", 0x12}, {&(0x7f0000000200)="045b55d4d5e929789766e5315ffab6aec2fc5aad33bddf916cc9ec4e51bab95ae80980d4908a9d8949d8f30a0ec2bcf4eea72b5c9c661f33f3c4dfd49681ba916dc5046d1e334001cd1c51fb07f8751afef05a", 0x53}, {&(0x7f0000000280)="69b32f73ec67ec0938b1398bfb813c86c6cea3726efbdadabf454d71247281d69e371bf21efc38977fda19743706f0ef39ca12bc8c9fb50cb0921b8f00ada11d392c7fcb7dd7c619a10373a945852c734b9ab499df39272479ce9374e2c645080eac0fd8fb4db80258a1d37ac37171779d41d10f68dba8e36415ba2d6cfdfabfca6dab4df2a158222bcd2eed4c2e775d97efb64f36fb1449ff0150f6129f5a", 0x9f}, {&(0x7f0000000340)="9f238cd53023f49834fc825bebd76844fda11ec0fb5c46c1f4ebd74ecee726e25c623852a6a6cdc9be90b5d437c4ad42a6affbe735e135703356c326eda54f1086b701576937f491053363ab5af1e18d1f52e948c83b6a8e", 0x58}, {&(0x7f00000003c0)="6a1776b3c43f0772759ffbf9645d8af1e9ca35c9160db8d179c7305838abe5660e64307179705861e4711347ba0a096b8b31a7bfaa2ee4c40f8b5eb9d1244466664f5ca487c25f80efd539f5a1ea0b72ff8234ac8d61c0c7d2db9929528bb2077b8c6f1759666701681799501afa7457899dd9bd657d112c8f3a859d24dc519bd033be065cbef091f1d9d239993ba3abe73167b82540e580ca6375354e205841d7db3e854e388736054ac634e0d8c454ed8f4c6c932537c3eef3d761a17e5c4433131e6bb30b0e8419afd36ed77f69ff5d8c39087cb8c394e25735", 0xdb}], 0x6, 0x0, 0x0, 0x80}}], 0x1, 0x44880) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1092.573991][T23662] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. [ 1092.603962][T17183] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1092.883816][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1093.003748][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1093.016516][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1093.027170][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1093.037229][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.050382][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1093.059498][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.313733][T17183] usb 5-1: usb_control_msg returned -32 [ 1093.319387][T17183] usbtmc 5-1:16.0: can't read capabilities [ 1093.533407][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.542586][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.551706][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.560817][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.570016][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.579125][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.588275][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.597411][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.606526][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.615626][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.624723][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.633856][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.642990][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.652187][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.661300][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.670407][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1093.709576][ T8465] usb 5-1: USB disconnect, device number 50 13:28:26 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) r4 = semget$private(0x0, 0x1, 0x30) semop(r4, &(0x7f0000000140)=[{0x4, 0x3, 0x1800}, {0x2, 0x9, 0x1000}, {0x3, 0x8, 0x800}, {0x3, 0x400, 0x1000}], 0x4) (async, rerun: 32) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast2, 0x7fffffff}, 0x1c) (async, rerun: 32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) (async, rerun: 64) semget$private(0x0, 0x1, 0x0) (rerun: 64) 13:28:26 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfa}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfa}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:26 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1ff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x93, 0x1, r3, 0x0, 0x5}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)="343740002cabf7d78112191f1cc2c56134ee7d638b0d8d688fb8bad005f0b5ca634f6668e874e1336b93bccfadee63b6045e5f382f8976b12dd235302bf8eedc86a8251ba3430be7", 0x2, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:26 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="8aadc727b749d1e7cf4eb2eae0d7735edbf0f2063fcc979f621ea73eace52747b0b732934bc711e2fbefd71191bd7413863d6b2056d66632a9058ea20d4645a8105f465b0710f1adf74bebc5891c08e48f71f528", 0x54}, {&(0x7f00000001c0)="a82934e9fc1e9136df52c9ce9557efdb60d6", 0x12}, {&(0x7f0000000200)="045b55d4d5e929789766e5315ffab6aec2fc5aad33bddf916cc9ec4e51bab95ae80980d4908a9d8949d8f30a0ec2bcf4eea72b5c9c661f33f3c4dfd49681ba916dc5046d1e334001cd1c51fb07f8751afef05a", 0x53}, {&(0x7f0000000280)="69b32f73ec67ec0938b1398bfb813c86c6cea3726efbdadabf454d71247281d69e371bf21efc38977fda19743706f0ef39ca12bc8c9fb50cb0921b8f00ada11d392c7fcb7dd7c619a10373a945852c734b9ab499df39272479ce9374e2c645080eac0fd8fb4db80258a1d37ac37171779d41d10f68dba8e36415ba2d6cfdfabfca6dab4df2a158222bcd2eed4c2e775d97efb64f36fb1449ff0150f6129f5a", 0x9f}, {&(0x7f0000000340)="9f238cd53023f49834fc825bebd76844fda11ec0fb5c46c1f4ebd74ecee726e25c623852a6a6cdc9be90b5d437c4ad42a6affbe735e135703356c326eda54f1086b701576937f491053363ab5af1e18d1f52e948c83b6a8e", 0x58}, {&(0x7f00000003c0)="6a1776b3c43f0772759ffbf9645d8af1e9ca35c9160db8d179c7305838abe5660e64307179705861e4711347ba0a096b8b31a7bfaa2ee4c40f8b5eb9d1244466664f5ca487c25f80efd539f5a1ea0b72ff8234ac8d61c0c7d2db9929528bb2077b8c6f1759666701681799501afa7457899dd9bd657d112c8f3a859d24dc519bd033be065cbef091f1d9d239993ba3abe73167b82540e580ca6375354e205841d7db3e854e388736054ac634e0d8c454ed8f4c6c932537c3eef3d761a17e5c4433131e6bb30b0e8419afd36ed77f69ff5d8c39087cb8c394e25735", 0xdb}], 0x6, 0x0, 0x0, 0x80}}], 0x1, 0x44880) (async) sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="8aadc727b749d1e7cf4eb2eae0d7735edbf0f2063fcc979f621ea73eace52747b0b732934bc711e2fbefd71191bd7413863d6b2056d66632a9058ea20d4645a8105f465b0710f1adf74bebc5891c08e48f71f528", 0x54}, {&(0x7f00000001c0)="a82934e9fc1e9136df52c9ce9557efdb60d6", 0x12}, {&(0x7f0000000200)="045b55d4d5e929789766e5315ffab6aec2fc5aad33bddf916cc9ec4e51bab95ae80980d4908a9d8949d8f30a0ec2bcf4eea72b5c9c661f33f3c4dfd49681ba916dc5046d1e334001cd1c51fb07f8751afef05a", 0x53}, {&(0x7f0000000280)="69b32f73ec67ec0938b1398bfb813c86c6cea3726efbdadabf454d71247281d69e371bf21efc38977fda19743706f0ef39ca12bc8c9fb50cb0921b8f00ada11d392c7fcb7dd7c619a10373a945852c734b9ab499df39272479ce9374e2c645080eac0fd8fb4db80258a1d37ac37171779d41d10f68dba8e36415ba2d6cfdfabfca6dab4df2a158222bcd2eed4c2e775d97efb64f36fb1449ff0150f6129f5a", 0x9f}, {&(0x7f0000000340)="9f238cd53023f49834fc825bebd76844fda11ec0fb5c46c1f4ebd74ecee726e25c623852a6a6cdc9be90b5d437c4ad42a6affbe735e135703356c326eda54f1086b701576937f491053363ab5af1e18d1f52e948c83b6a8e", 0x58}, {&(0x7f00000003c0)="6a1776b3c43f0772759ffbf9645d8af1e9ca35c9160db8d179c7305838abe5660e64307179705861e4711347ba0a096b8b31a7bfaa2ee4c40f8b5eb9d1244466664f5ca487c25f80efd539f5a1ea0b72ff8234ac8d61c0c7d2db9929528bb2077b8c6f1759666701681799501afa7457899dd9bd657d112c8f3a859d24dc519bd033be065cbef091f1d9d239993ba3abe73167b82540e580ca6375354e205841d7db3e854e388736054ac634e0d8c454ed8f4c6c932537c3eef3d761a17e5c4433131e6bb30b0e8419afd36ed77f69ff5d8c39087cb8c394e25735", 0xdb}], 0x6, 0x0, 0x0, 0x80}}], 0x1, 0x44880) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1094.297965][T23678] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1094.336350][T23680] iommufd_mock iommufd_mock3: Adding to iommu group 1 13:28:27 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1094.371623][T23682] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1094.410799][T23683] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1094.440548][T23683] CPU: 1 PID: 23683 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1094.451153][T23683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1094.461292][T23683] Call Trace: [ 1094.464618][T23683] [ 1094.467675][T23683] dump_stack_lvl+0x125/0x1b0 [ 1094.472427][T23683] sysfs_warn_dup+0x7f/0xa0 [ 1094.477004][T23683] sysfs_create_dir_ns+0x247/0x2a0 [ 1094.482187][T23683] ? sysfs_create_mount_point+0xb0/0xb0 [ 1094.487815][T23683] ? spin_bug+0x1d0/0x1d0 [ 1094.492230][T23683] ? do_raw_spin_unlock+0x173/0x230 [ 1094.497502][T23683] kobject_add_internal+0x2c8/0x960 [ 1094.502771][T23683] kobject_add+0x16f/0x240 [ 1094.507424][T23683] ? kset_create_and_add+0x190/0x190 [ 1094.512775][T23683] ? kobject_put+0xbe/0x440 [ 1094.517343][T23683] ? bus_get_dev_root+0x5e/0x80 [ 1094.522263][T23683] device_add+0x289/0x1aa0 [ 1094.526738][T23683] ? device_initialize+0x510/0x510 [ 1094.531931][T23683] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1094.538854][T23683] ? __init_waitqueue_head+0xca/0x150 [ 1094.544309][T23683] iommufd_test+0x1c47/0x2e60 [ 1094.549081][T23683] ? reacquire_held_locks+0x4b0/0x4b0 [ 1094.554550][T23683] ? iommufd_selftest_destroy+0x100/0x100 [ 1094.560430][T23683] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1094.565529][T23683] iommufd_fops_ioctl+0x347/0x4d0 [ 1094.570716][T23683] ? iommufd_destroy+0x180/0x180 [ 1094.575830][T23683] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1094.580841][T23683] ? iommufd_destroy+0x180/0x180 [ 1094.585872][T23683] __x64_sys_ioctl+0x18f/0x210 [ 1094.590699][T23683] do_syscall_64+0x38/0xb0 [ 1094.595181][T23683] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1094.601326][T23683] RIP: 0033:0x7f69ab27cae9 [ 1094.605964][T23683] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1094.625973][T23683] RSP: 002b:00007f69abf080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:28:27 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1ff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x93, 0x1, r3, 0x0, 0x5}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)="343740002cabf7d78112191f1cc2c56134ee7d638b0d8d688fb8bad005f0b5ca634f6668e874e1336b93bccfadee63b6045e5f382f8976b12dd235302bf8eedc86a8251ba3430be7", 0x2, 0x1}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1094.634455][T23683] RAX: ffffffffffffffda RBX: 00007f69ab39c050 RCX: 00007f69ab27cae9 [ 1094.642480][T23683] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 1094.650505][T23683] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1094.658551][T23683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.666580][T23683] R13: 000000000000000b R14: 00007f69ab39c050 R15: 00007f69ab4bfa48 [ 1094.674643][T23683] 13:28:27 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000540)={0xc}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfa}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r7}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) [ 1094.722713][T23698] iommufd_mock iommufd_mock3: Adding to iommu group 1 [ 1094.734840][T23683] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1094.794594][T23700] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:28:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:27 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1ff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x93, 0x1, r3, 0x0, 0x5}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)="343740002cabf7d78112191f1cc2c56134ee7d638b0d8d688fb8bad005f0b5ca634f6668e874e1336b93bccfadee63b6045e5f382f8976b12dd235302bf8eedc86a8251ba3430be7", 0x2, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1ff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x93, 0x1, r3, 0x0, 0x5}) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)="343740002cabf7d78112191f1cc2c56134ee7d638b0d8d688fb8bad005f0b5ca634f6668e874e1336b93bccfadee63b6045e5f382f8976b12dd235302bf8eedc86a8251ba3430be7", 0x2, 0x1}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) [ 1094.873450][T17183] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1094.976769][T23706] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1094.991361][T23705] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1095.040104][T23710] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1095.113987][T17183] usb 5-1: Using ep0 maxpacket: 8 [ 1095.234374][T17183] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1095.253405][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1095.265640][T17183] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.276114][T17183] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.301227][T17183] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1095.323576][T17183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.593667][T17183] usb 5-1: usb_control_msg returned -32 [ 1095.599377][T17183] usbtmc 5-1:16.0: can't read capabilities 13:28:28 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) r4 = semget$private(0x0, 0x1, 0x30) semop(r4, &(0x7f0000000140)=[{0x4, 0x3, 0x1800}, {0x2, 0x9, 0x1000}, {0x3, 0x8, 0x800}, {0x3, 0x400, 0x1000}], 0x4) (async) semop(r4, &(0x7f0000000140)=[{0x4, 0x3, 0x1800}, {0x2, 0x9, 0x1000}, {0x3, 0x8, 0x800}, {0x3, 0x400, 0x1000}], 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast2, 0x7fffffff}, 0x1c) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast2, 0x7fffffff}, 0x1c) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) semget$private(0x0, 0x1, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 13:28:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x41) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000240)) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000001c0)={0xc}) 13:28:28 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000200)={0x28, 0x0, 0x0, r8, 0x3ea175, 0xfffffffffffffffb, 0x5, 0x7bdff}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1095.719375][T17191] usb 5-1: USB disconnect, device number 51 [ 1095.843021][T23725] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1095.869150][T23721] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1095.879969][T23727] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:28:28 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000200)={0x28, 0x0, 0x0, r8, 0x3ea175, 0xfffffffffffffffb, 0x5, 0x7bdff}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0xfffffffffffffffa, 0xb61}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r11, 0x3b84, &(0x7f0000000280)={0x20, r12, 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 13:28:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1095.899952][T23735] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 1096.178558][T23744] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1096.224811][T23746] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:29 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x41) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000240)) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000001c0)={0xc}) 13:28:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1096.302375][T23747] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1096.309702][T17191] usb 5-1: new high-speed USB device number 52 using dummy_hcd 13:28:29 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000200)={0x28, 0x0, 0x0, r8, 0x3ea175, 0xfffffffffffffffb, 0x5, 0x7bdff}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1096.427033][T23761] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1096.568741][T23769] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1096.593890][T17191] usb 5-1: Using ep0 maxpacket: 8 [ 1096.732409][T17191] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1096.761470][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1096.776937][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.803633][T17191] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.820555][T17191] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1096.830469][T17191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.103821][T17191] usb 5-1: usb_control_msg returned -32 [ 1097.109479][T17191] usbtmc 5-1:16.0: can't read capabilities [ 1097.313447][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.322714][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.331845][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.341229][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.350366][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.359469][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.368595][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.377726][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.386913][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.396017][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.405128][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.414255][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.423401][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.432518][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.441624][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.450722][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1097.474637][ T5142] usb 5-1: USB disconnect, device number 52 13:28:30 executing program 4: semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) pipe(&(0x7f0000000040)) 13:28:30 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x1, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x41) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000240)) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r7, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000005}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000001c0)={0xc}) (rerun: 32) 13:28:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0xfffffffffffffffa, 0xb61}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r11, 0x3b84, &(0x7f0000000280)={0x20, r12, 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 13:28:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) dup2(r3, r3) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x1, 0x7, 0x7f, 0x1, 0x5]}, &(0x7f00000000c0)=0x54) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000400)={{0x0, 0x16, 0x40, 0x3f, 0x7fffffffffffffff, 0x9, 0x6, 0x329ef838, 0x80, 0x0, 0x2, 0xba8, 0x5, 0x0, 0x40}}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5}) [ 1098.124472][T23779] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1098.137820][T23786] iommufd_mock iommufd_mock2: Adding to iommu group 0 13:28:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) pipe(&(0x7f0000000040)) 13:28:31 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:31 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) pipe(&(0x7f0000000040)) [ 1098.356698][T23798] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:31 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) dup2(r3, r3) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x1, 0x7, 0x7f, 0x1, 0x5]}, &(0x7f00000000c0)=0x54) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000400)={{0x0, 0x16, 0x40, 0x3f, 0x7fffffffffffffff, 0x9, 0x6, 0x329ef838, 0x80, 0x0, 0x2, 0xba8, 0x5, 0x0, 0x40}}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5}) [ 1098.442871][T23803] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1098.453550][T17191] usb 5-1: new high-speed USB device number 53 using dummy_hcd 13:28:31 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) [ 1098.643583][T23810] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1098.686109][T23812] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1098.703036][T23812] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1098.744031][T17191] usb 5-1: Using ep0 maxpacket: 8 [ 1098.873607][T17191] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1098.888566][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1098.899158][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1098.909746][T17191] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.923948][T17191] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1098.935701][T17191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.196588][T17191] usb 5-1: usb_control_msg returned -32 [ 1099.202252][T17191] usbtmc 5-1:16.0: can't read capabilities [ 1099.393687][T17182] usb 5-1: USB disconnect, device number 53 13:28:32 executing program 4: semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='netpci0\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}}) 13:28:32 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0xfffffffffffffffa, 0xb61}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r11, 0x3b84, &(0x7f0000000280)={0x20, r12, 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 13:28:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:32 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) dup2(r3, r3) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x1, 0x7, 0x7f, 0x1, 0x5]}, &(0x7f00000000c0)=0x54) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000400)={{0x0, 0x16, 0x40, 0x3f, 0x7fffffffffffffff, 0x9, 0x6, 0x329ef838, 0x80, 0x0, 0x2, 0xba8, 0x5, 0x0, 0x40}}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5}) 13:28:32 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1100.022430][T23823] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:32 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='netpci0\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}}) [ 1100.074401][T23826] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async, rerun: 32) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='netpci0\x00') (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}}) [ 1100.170679][T23837] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1100.196821][T23828] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1100.293512][ T8465] usb 5-1: new high-speed USB device number 54 using dummy_hcd 13:28:33 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:33 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x30181, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1100.492275][T23850] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:33 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = syz_io_uring_complete(0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1100.584455][ T8465] usb 5-1: Using ep0 maxpacket: 8 [ 1100.735104][ T8465] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1100.768080][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1100.810059][ T8465] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1100.827833][ T8465] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.860008][ T8465] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1100.876662][ T8465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.133609][ T8465] usb 5-1: usb_control_msg returned -32 [ 1101.139336][ T8465] usbtmc 5-1:16.0: can't read capabilities 13:28:35 executing program 4: semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0xee}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) 13:28:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:35 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x30181, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x30181, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:35 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r4 = syz_io_uring_complete(0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0xe, &(0x7f0000000680)={r5, @in6={{0xa, 0x0, 0x0, @local}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, &(0x7f0000000480)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x13, 0x0, 0x208, 0x2, 0x80000000, 0x3, 0xffff, 0x1, r5}, 0x20) [ 1103.029779][T17176] usb 5-1: USB disconnect, device number 54 13:28:35 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r4 = syz_io_uring_complete(0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:36 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x30181, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1103.162279][T23867] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:36 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1103.437624][T23883] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:36 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:36 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000240)={0xc}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) dup(r15) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x2, 0x3000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r15, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(r15, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0fe888354f66b8007800000f23d00f21f86635300000050f23f8ba6100ed66660fc7b5df0067640f01fa270f32b801008ee8b899008ed80fc71c", 0x3a}], 0x1, 0x50, &(0x7f0000000240), 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r16, 0x0, 0x2}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:36 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1103.553401][T17176] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1103.627709][T23887] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1103.666906][T23889] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1103.710417][T23890] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1103.833589][T17176] usb 5-1: Using ep0 maxpacket: 8 [ 1104.003987][T17176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1104.020060][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1104.030807][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1104.053744][T17176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.075943][T17176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1104.091365][T17176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.370971][T17176] usb 5-1: usb_control_msg returned -32 [ 1104.378235][T17176] usbtmc 5-1:16.0: can't read capabilities 13:28:37 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:37 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r3, 0x7d586000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x80000000, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r4, 0x0, 0x3d3, 0xd2fc}) 13:28:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0xe, &(0x7f0000000680)={r5, @in6={{0xa, 0x0, 0x0, @local}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, &(0x7f0000000480)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x13, 0x0, 0x208, 0x2, 0x80000000, 0x3, 0xffff, 0x1, r5}, 0x20) 13:28:37 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000240)={0xc}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) dup(r15) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x2, 0x3000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r15, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(r15, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0fe888354f66b8007800000f23d00f21f86635300000050f23f8ba6100ed66660fc7b5df0067640f01fa270f32b801008ee8b899008ed80fc71c", 0x3a}], 0x1, 0x50, &(0x7f0000000240), 0x0) (async) syz_kvm_setup_cpu$x86(r15, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0fe888354f66b8007800000f23d00f21f86635300000050f23f8ba6100ed66660fc7b5df0067640f01fa270f32b801008ee8b899008ed80fc71c", 0x3a}], 0x1, 0x50, &(0x7f0000000240), 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r16, 0x0, 0x2}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1104.564049][T23901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.572878][T23901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.601807][T17176] usb 5-1: USB disconnect, device number 55 13:28:37 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11110000733336088dee1adb236100000001f9012d0001100000000904000003fe03010009cd8d1f00020000000905050200fe7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_usb_connect(0x6, 0xa4c, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xc1, 0x9, 0xf8, 0xff, 0xcde, 0x6, 0x5b74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3a, 0x3, 0x6, 0x7f, 0xd0, 0xfa, [{{0x9, 0x4, 0x7a, 0xe7, 0x8, 0x63, 0x5a, 0xfd, 0x80, [@hid_hid={0x9, 0x21, 0x200, 0x81, 0x1, {0x22, 0x768}}], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x2, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0xff, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x242c47d7a169362e, 0xf3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x4, 0x40, [@generic={0xde, 0x22, "457ebcc95a27fa7232b959686e5eab71e50bf1fed27ddc0d79f5f67077bcc6e50b8e49a5a159da55c5c5ef9924b71bcdf2249e1890790002338e29c3b3edd4176970c1c07a162e35480ee3ee282b790f43dab737e4f3aec685017dc83076804bd409471e3b110a5b1e2334af80d7d674ce1e731c831898a2176609db3252eb826516e6cf2c7f97e650889c76db54e4d0a56f13e189fd55ff8b683e6aabdb038f5a63e5b80a8e1a9d96294cda8351862caa22c6dc1d4f12eda4c37c725f476914aa1f2ff72a7a0e2b75ed3b8052a9ae1233b87449ef7818bf082aa13e"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x430, 0x1, 0x6, 0x4, [@generic={0xcb, 0x22, "8f91fd34c7d66f4bd82ddd407ca1d0e0ee361c546805bfb4638e6d148014d91ec8140ff0910baa419ac6b025d7f28897de01fa12b9ffea8a94ac53c648cbb9148284c8795d860b95da7f74707739919e51cc6d05dc8b3714d8be5ca7c43a5bd78f9af8df4060271888127a3f77c483568910398937694f9d9e906cb7809ddb0bdd8dec6cc5227b31e4a7bc9ea80670196db81931686723f8959d953d7bdc47eee00cad2c31922008248ecd7079412be3f839b51790f5780f055d957a8800233c48dd4efab48fd87e73"}, @generic={0xaf, 0xa, "a3b99f5e85d6e2888d923e3e882ff46b671959ac17682fd1cbb610b312b8983401f21f5cc5421092daa8c1a1f182f9a0488433bcbd745fdf44d627dab19fe408c1d1690b8133001096fe9e5b8947da7a083266fbffb81558cccee6cf9d42439c315f7a8bb50dcec5bf68027520fcb943065821fb540743a299538aca8d4976dddcacc2eb903f64fd48de20e25c45829c24494a1255802d84507a238ccfc9a57c30f4d235052617b2adc9960c6a"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x5, 0x3, 0x5, [@generic={0x3e, 0x30, "285051acc7f7ed69a0c0c61416884fe58e0c1b1db88750b654b8a566a4e4475f9eff7c514ebaa75c81eb38b081fcee17090b745ce6e1051775f54e12"}, @generic={0x7e, 0x10, "0e9ee9ed144d336896ce98eb15ad75f633f74340b40a551c3c3d5d347e745151050d0089be83f12112d54c10b1f1cbc3925e31abb0e031ee84390d6a132df83ae92814abd43f2358a386ade2e44f7539405ec5a46a635651d4921c4e005abc9b3a2cd3e1244f71375e7536072d48a688d0558804e7060353dc2eb455"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x20, 0x5, 0x1f}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x9, 0x40, 0x0, [@generic={0x11, 0xd, "902193d001a0ada30bde947d4a703e"}, @generic={0xb9, 0x8, "02425e1d6ed851e327752905fb5d18ae693e6633e4dd68689de9af380688b80a45fa1257ef301ed8f9f497f8e022085c36fc1db1edbbe35919f5a5d4150975c1e283b2e270e3721587cb215aa128c5174b6543d7c5967d68402db72a69e1fa85108f1c196ca913f888598f3fc5782237af1e6ed949489d13e8c4b6e797986efff73361d162962bb6a14e4c69cfe557c6f575361a6704e74ab483024ddcf8006ee474fef832d94ff730a875ccd9448dc9e8e32bdc2a2e8e"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xc, 0x4c, 0x6f, 0xd9, 0x1f, [@hid_hid={0x9, 0x21, 0x20, 0x81, 0x1, {0x22, 0xde7}}], [{{0x9, 0x5, 0xc, 0x10, 0x3cf, 0x81, 0x2, 0xbc}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0xf6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3a, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x81, 0x9, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0xff, 0x82, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x14, 0x2, [@generic={0x86, 0x1, "cab296eb564ce0b09c27c09b7a546d97a92f07b57e40ef186ef8a47bdc177613e4e87be0d1f0573be8b81879f7d3796196ac422ec8a3b511a9ffa37ebfd252864918ae76317eab08e93ca75a6557a34617bd95581c3db330d44499eb873b58d931f776279edbee3cf920c0c0b89f4adc5acecd99e39c2bd7e2bad237ee86e4127bc6b678"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x3, 0x80, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x2, 0x9, [@generic={0xe2, 0x8, "386039b1826f2557e8a25e62fe7823bd97adee6d326c28d3036d719c5fb732163a47fc5a84442fcaa965210747b5056a7e51245654a064900ef8b091f4d2b0722863c49ad9aa997f539dc6a8e33b2f08cae0f89a35bb745aa635f4c0fc80a19c2567ff45a160234b69a3522b6bf40b226f5b3475dea0c1b580e9e30894d8d48ee52a015916ebc281621f9947aaf945f22a63aed8cf9443749855a0e7e20d9b584eb42f08b9c29881b29901b3476465fd74eb7014ff6b9dfda60300dfce359d88caf0ea4184e1b1749eaaea7417e6b6566bd59f313e67be0b41bb3ff5e25d0dcb"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x40, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x20, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x9}, @generic={0xaa, 0x1, "d1a40e4fdfceccf62e02b8b7557bd1e662c2fc10122462946dfe2be4dc1cf55f9fa465ccd55d106aac69f551c36e7fc99a947d7ff6d36e056b03be7c53700f6acdb066f6fab0c033398ebd885e8a6b793c76e10ab312831cdd7307de54294ca7a9a49ef03e8de8f0746d17fac7f616391fa58744a27ab1fbaa6d7b14de11a82c3c8f2626a86b407b65d55365174d4cfffb6f954a6d1e59ce03018ebb2fa34caf8712536212ac58f6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7, 0xaa, 0x7f}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x81, 0x3, [@generic={0x43, 0xb, "a4f21c0d3f1f3f23500d1c536e4794117bb0e78158702a3fe844a0f71a7e0725e691d20cabff837e06f27d59f8184dc8f920b8660fb4321f13456c366a0c05f3d0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x81, 0x1f, [@generic={0xd4, 0x22, "20e38557430e5cf32da044d95a6598331de53569979c641b7d396546e868ede4554dd5d9701f00800460b26ec6e75eeb2a5e6e6a2b3aa63376005485800cef8178684bac870022ceaf5e60e2e8a58744ad96b0daa5696ca338220a8dc59fd31cb4c99475cf133776a354c1c75303c33e1fb1d6bd6deacb42bc47e39ee044fe943a430c2bba3349d3716f66711ba2ee35a2611486502ad9a21853eea856765a98d5b5e15be4d1cb229ce6cecb22e97022e65a5fad43e6f09d8850e1c396f35fd92f68045b69bba996d9b800420288012f745e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x6, 0x5, 0x80}}]}}, {{0x9, 0x4, 0xc1, 0x9, 0xb, 0xff, 0x3, 0x36, 0x11, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x85b, 0x5, 0x4, "6004bb92d10610"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0x2e, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xfe, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8000}, @generic={0x89, 0x30, "acf0bbb14c3fa24f744e8c83b871433d814ed15779cb0c6ce425f76f234e1951a08a613c0f22f4528f4ed39af6f5a9046695979f2ff30dee29705000e57c6021bee958f2347ac7f71bcdddee754ae6dc53e8e7c03bd729d6a71ecebb0bbaa31cb172cc15a60a9ea7d8055818f3e02a50870b07aee1f4ab2a7993ff38ab19c3a380d4e9d090fb72"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x84, 0x0, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0xff, 0x8, 0xa6, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x6, 0x1f, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x19}}, {{0x9, 0x5, 0xc, 0x8, 0x428, 0x2, 0x20, 0x1f}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x8c, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x78, 0x6d, [@generic={0xe9, 0xd, "4e77143c19364d71cbdc0d2dbc89323775b14b62346d0f960d614d8e1074ff28ef2896f8c0af748b0e0ab8775fcf28ba0928e71c9c5c9aacf1eaf1ca08de02a60ce90a1646a382530e8621fc84c5c32959153accad0cc398fea85ce69ba46730b8ccd05d320f5f7d789cdf7c939e1ad62a68bace873b9870504d2e561ab8facd45c9553490004dacfc024e81f82bab7f453a46782fa841b905966997cbe573cb669bcfc00f88a0e3f66bcb18018abcd289ff1f5525361cd4d0d91a92e528611bd09017660a4aa660bd90d09f434b49bbdfa99f0b51eead3e0de8e0c65d31f04bc5d4265640aee2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x40a}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0x3f, 0x81, 0x10, 0x8}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "eed8d3be656738c3518ffba3d91af456"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x20}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}]}) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x2000000, [{0x9}, {0x2a, 0x7f}]}, 0x14, 0x1) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0xff, {{0xa, 0x4e24, 0x7, @local}}}, 0x88) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) semtimedop(0x0, &(0x7f0000001c00)=[{0x1, 0x4, 0x800}, {0x0, 0x3, 0x1000}], 0x2, &(0x7f0000001c40)={0x0, 0x989680}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x3a, {0x3a, 0x2b, "74da1f1e92428e5e1d58bad59a6446dcb6f4ebbb08692ced1219cd052fc0c53dd3794fd221bb1dc2b9585d0488263b50e0a5cf128527bd2f"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f00000003c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x48, "e813924b360908f535fd35df925570bb"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x8, 0x7, "b17f104b", "7b146802"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x60, 0x3, 0xff, 0x1f, 0x6, 0x7}}}, &(0x7f0000001440)={0x84, &(0x7f0000001000)={0x20, 0x7, 0xc9, "08cbfe3e7611f4e3307a207116d19496d27b37fd8ab64cf511bd6f8160e5de222a8cb7f2fc54db1829f9ba044f60da2242497845d6f58cdf308b7d7ae1e29282830b77bec95814ebbba3efbd810416febe34bf55518d6ef7a7cc31238d25e63acb3a79689220ed9d3435585fef9a22b656633280ffeb44e7acb88c669b3c4c8f9169e4ab546357aaa4b88cef42585b29a8aa33df40f34aaeea9968bab8bd7da0792736c59d295d48f424a2233b4ca16e04e151aa5d31aad56e9005be44683339672755d277ad9e6939"}, 0xfffffffffffffffe, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f460"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001300)={0x40, 0x19, 0x2, "8b77"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000001c80)={'veth0_to_bond\x00'}) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) semget$private(0x0, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x431300, 0x0) r6 = syz_usb_connect(0x3, 0x21a, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0xdb, 0xa6, 0x5a, 0x8, 0x48d, 0x9005, 0x1105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x208, 0x2, 0x1, 0xfb, 0x30, 0xcc, [{{0x9, 0x4, 0x1a, 0xf0, 0x4, 0xa1, 0xe6, 0xd0, 0x20, [@hid_hid={0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5ba}}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0xb9, "e373", "e2ad66"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xe, 0x5, 0x20, "daf6c1ea2e729faa"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xdf, 0x3, 0x6, 0x6, "cb9f77425e47672cba"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xfe, 0x6, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x2, 0x5c, 0x7, [@generic={0x3c, 0x31, "c26d74c59360af229c837598ec8cfd2fc7d9a0ac039e12535952ffa99a975d324aa9baa116143558c5989dc7ab71d075a0031e388193e4d9b688"}, @generic={0x5b, 0x23, "6c0f04db456b724cc8b1deaf37b1bfe656cca410fbbf761f4583cbfbd24e1ddd956ef7e6146a23423c7e68f5cca5c94a1e58db6bd8044cf52366ef55ea7b1520bcd2868abb06e6c9e7ab20c25c6239dc7fba8b7801bb486c48"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x20, 0xe1, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xdf00}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1ff}]}}]}}, {{0x9, 0x4, 0x25, 0x0, 0x6, 0x15, 0xb8, 0x15, 0xfa, [@generic={0xc, 0x5, "192518d0f6fd58d2ffd7"}], [{{0x9, 0x5, 0xa, 0x3, 0x0, 0x9, 0x7d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x3, 0x90d}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x8, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x20, 0x70, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}, @generic={0x7, 0x1, "48b261cc9e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x48, 0x13, 0x2, [@generic={0x64, 0x31, "e7d4c7940da613abe17d783b559dfa86dc59863463af471660363547635a1a933e9efa3e2b1530ffc80e42379222f4ec052998a7e64ee9ca1f3703e959a633be4664bf565800236d718e207f19fcc3d4b8c354ff0e186e1a89d176f71bbbbbaefadd"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xa, 0x61, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f}]}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0x20, 0x1, 0x5b, 0x40, 0x3f}, 0xe2, &(0x7f0000001800)=ANY=[@ANYBLOB="050fe20003036a55b08109a6437d333a529d363383fa83a602792ce49b21b69ce043771581869af3305d0e0845ceb35856f862792cccd8eda1d6f069f0952d2c24f60abcdd2442a600a42ce6ac91b45e76425938234e2d1f0125b41738abf8288b2867fc17a6f3fbbe7aedce5f6a194d2216d173a2dcf76907ab4a41b0ac63f451f6daf2d3b2aced9bcb8d0b3c671f5a2700ce99ae65b4073a51af7b568ea6205b6bcf3c50f75a07b3eaeeb0d2d08e9d0ebaec5fb7da64548c278b5e86dea0bad707a987b5086dada363f312cb5ee429bb28bc9649983567aea43f9ac5216c6ff554"], 0x1, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001a80)={0x14, &(0x7f0000001980)={0x20, 0xc, 0x9e, {0x9e, 0x5, "4c71a2cc85849eda5b106d695c121a2a3d2628cfd41d382976ab7604f4d768aa725357a54509e77cea649c32d90545e1ff14169efdd117ded7633f7e89bb65dbd06a96d70986ccb89b030d8c52de102bfb45f4baf44e936034f517897f79ecdb4f2d81d5b0f9bee5c86fd25ec42e53e31d9baa7281f045383a659c824cb6dda4c1367fe59953c261fa940a34f0e6dbf4abee6383b526bc7533b3d721"}}, &(0x7f0000001a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x1c, &(0x7f0000001ac0)={0x20, 0xd, 0x58, "afba3eed37bca20583b35274baf289e9eefee6bf9dd6c82e974afd5941915123066d2d8a84f63eac710eaea16ce9c7b369235e08962db7dd156294f83b6667949ad439da8a7326adf46f56060d2cf56142a6ef6d64882cd5"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x9d}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) [ 1104.752921][T23914] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1104.776566][T23917] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:37 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000540)={0xc}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r8}) 13:28:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0xe, &(0x7f0000000680)={r5, @in6={{0xa, 0x0, 0x0, @local}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, &(0x7f0000000480)=0x100) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x13, 0x0, 0x208, 0x2, 0x80000000, 0x3, 0xffff, 0x1, r5}, 0x20) [ 1104.971051][T23911] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:37 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r3, 0x7d586000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r3, 0x7d586000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x80000000, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r4, 0x0, 0x3d3, 0xd2fc}) [ 1105.076638][T23932] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:38 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0xffffffff80000001, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1105.238963][T17176] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1105.391253][T23940] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:38 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r3, 0x7d586000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x80000000, 0x3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x80000000, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r9}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r4, 0x0, 0x3d3, 0xd2fc}) [ 1105.437486][T23944] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1105.463857][T17176] usb 5-1: device descriptor read/64, error -71 13:28:38 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0xffffffff80000001, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:38 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000240)={0xc}) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) dup(r15) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x2, 0x3000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r15, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(r15, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0fe888354f66b8007800000f23d00f21f86635300000050f23f8ba6100ed66660fc7b5df0067640f01fa270f32b801008ee8b899008ed80fc71c", 0x3a}], 0x1, 0x50, &(0x7f0000000240), 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r16, 0x0, 0x2}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1105.719187][T23955] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1105.743588][T17176] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1105.760341][T23950] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:38 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0xffffffff80000001, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1105.796987][T23957] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1105.900987][T23960] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1105.955453][T17176] usb 5-1: device descriptor read/64, error -71 [ 1105.961337][T23960] CPU: 1 PID: 23960 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1105.972218][T23960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1105.982417][T23960] Call Trace: [ 1105.985738][T23960] [ 1105.988706][T23960] dump_stack_lvl+0x125/0x1b0 [ 1105.993448][T23960] sysfs_warn_dup+0x7f/0xa0 [ 1105.998023][T23960] sysfs_create_dir_ns+0x247/0x2a0 [ 1106.003199][T23960] ? sysfs_create_mount_point+0xb0/0xb0 [ 1106.008809][T23960] ? spin_bug+0x1d0/0x1d0 [ 1106.013214][T23960] ? do_raw_spin_unlock+0x173/0x230 [ 1106.018500][T23960] kobject_add_internal+0x2c8/0x960 [ 1106.023783][T23960] kobject_add+0x16f/0x240 [ 1106.028262][T23960] ? kset_create_and_add+0x190/0x190 [ 1106.033620][T23960] ? kobject_put+0xbe/0x440 [ 1106.038191][T23960] ? bus_get_dev_root+0x5e/0x80 [ 1106.043115][T23960] device_add+0x289/0x1aa0 [ 1106.047595][T23960] ? device_initialize+0x510/0x510 [ 1106.052871][T23960] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1106.059891][T23960] ? __init_waitqueue_head+0xca/0x150 [ 1106.065352][T23960] iommufd_test+0x1c47/0x2e60 [ 1106.070090][T23960] ? reacquire_held_locks+0x4b0/0x4b0 [ 1106.075541][T23960] ? iommufd_selftest_destroy+0x100/0x100 [ 1106.081340][T23960] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1106.086426][T23960] iommufd_fops_ioctl+0x347/0x4d0 [ 1106.091498][T23960] ? iommufd_destroy+0x180/0x180 [ 1106.096492][T23960] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1106.101473][T23960] ? iommufd_destroy+0x180/0x180 [ 1106.106487][T23960] __x64_sys_ioctl+0x18f/0x210 [ 1106.111303][T23960] do_syscall_64+0x38/0xb0 [ 1106.115764][T23960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1106.121700][T23960] RIP: 0033:0x7f798a67cae9 [ 1106.126149][T23960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1106.145800][T23960] RSP: 002b:00007f798b3450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.154252][T23960] RAX: ffffffffffffffda RBX: 00007f798a79bf80 RCX: 00007f798a67cae9 [ 1106.162258][T23960] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1106.170262][T23960] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1106.178265][T23960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.186262][T23960] R13: 000000000000000b R14: 00007f798a79bf80 R15: 00007f798a8bfa48 [ 1106.194287][T23960] 13:28:39 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x6) [ 1106.209223][T17176] usb usb5-port1: attempt power cycle 13:28:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5c}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1106.260073][T23960] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1106.653572][T17176] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1106.743963][T17176] usb 5-1: device descriptor read/8, error -71 [ 1107.013713][T17176] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1107.116140][T17176] usb 5-1: device descriptor read/8, error -71 [ 1107.234610][T17176] usb usb5-port1: unable to enumerate USB device 13:28:40 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11110000733336088dee1adb236100000001f9012d0001100000000904000003fe03010009cd8d1f00020000000905050200fe7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_usb_connect(0x6, 0xa4c, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xc1, 0x9, 0xf8, 0xff, 0xcde, 0x6, 0x5b74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3a, 0x3, 0x6, 0x7f, 0xd0, 0xfa, [{{0x9, 0x4, 0x7a, 0xe7, 0x8, 0x63, 0x5a, 0xfd, 0x80, [@hid_hid={0x9, 0x21, 0x200, 0x81, 0x1, {0x22, 0x768}}], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x2, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0xff, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x242c47d7a169362e, 0xf3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x4, 0x40, [@generic={0xde, 0x22, "457ebcc95a27fa7232b959686e5eab71e50bf1fed27ddc0d79f5f67077bcc6e50b8e49a5a159da55c5c5ef9924b71bcdf2249e1890790002338e29c3b3edd4176970c1c07a162e35480ee3ee282b790f43dab737e4f3aec685017dc83076804bd409471e3b110a5b1e2334af80d7d674ce1e731c831898a2176609db3252eb826516e6cf2c7f97e650889c76db54e4d0a56f13e189fd55ff8b683e6aabdb038f5a63e5b80a8e1a9d96294cda8351862caa22c6dc1d4f12eda4c37c725f476914aa1f2ff72a7a0e2b75ed3b8052a9ae1233b87449ef7818bf082aa13e"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x430, 0x1, 0x6, 0x4, [@generic={0xcb, 0x22, "8f91fd34c7d66f4bd82ddd407ca1d0e0ee361c546805bfb4638e6d148014d91ec8140ff0910baa419ac6b025d7f28897de01fa12b9ffea8a94ac53c648cbb9148284c8795d860b95da7f74707739919e51cc6d05dc8b3714d8be5ca7c43a5bd78f9af8df4060271888127a3f77c483568910398937694f9d9e906cb7809ddb0bdd8dec6cc5227b31e4a7bc9ea80670196db81931686723f8959d953d7bdc47eee00cad2c31922008248ecd7079412be3f839b51790f5780f055d957a8800233c48dd4efab48fd87e73"}, @generic={0xaf, 0xa, "a3b99f5e85d6e2888d923e3e882ff46b671959ac17682fd1cbb610b312b8983401f21f5cc5421092daa8c1a1f182f9a0488433bcbd745fdf44d627dab19fe408c1d1690b8133001096fe9e5b8947da7a083266fbffb81558cccee6cf9d42439c315f7a8bb50dcec5bf68027520fcb943065821fb540743a299538aca8d4976dddcacc2eb903f64fd48de20e25c45829c24494a1255802d84507a238ccfc9a57c30f4d235052617b2adc9960c6a"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x5, 0x3, 0x5, [@generic={0x3e, 0x30, "285051acc7f7ed69a0c0c61416884fe58e0c1b1db88750b654b8a566a4e4475f9eff7c514ebaa75c81eb38b081fcee17090b745ce6e1051775f54e12"}, @generic={0x7e, 0x10, "0e9ee9ed144d336896ce98eb15ad75f633f74340b40a551c3c3d5d347e745151050d0089be83f12112d54c10b1f1cbc3925e31abb0e031ee84390d6a132df83ae92814abd43f2358a386ade2e44f7539405ec5a46a635651d4921c4e005abc9b3a2cd3e1244f71375e7536072d48a688d0558804e7060353dc2eb455"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x20, 0x5, 0x1f}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x9, 0x40, 0x0, [@generic={0x11, 0xd, "902193d001a0ada30bde947d4a703e"}, @generic={0xb9, 0x8, "02425e1d6ed851e327752905fb5d18ae693e6633e4dd68689de9af380688b80a45fa1257ef301ed8f9f497f8e022085c36fc1db1edbbe35919f5a5d4150975c1e283b2e270e3721587cb215aa128c5174b6543d7c5967d68402db72a69e1fa85108f1c196ca913f888598f3fc5782237af1e6ed949489d13e8c4b6e797986efff73361d162962bb6a14e4c69cfe557c6f575361a6704e74ab483024ddcf8006ee474fef832d94ff730a875ccd9448dc9e8e32bdc2a2e8e"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xc, 0x4c, 0x6f, 0xd9, 0x1f, [@hid_hid={0x9, 0x21, 0x20, 0x81, 0x1, {0x22, 0xde7}}], [{{0x9, 0x5, 0xc, 0x10, 0x3cf, 0x81, 0x2, 0xbc}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0xf6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3a, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x81, 0x9, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0xff, 0x82, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x14, 0x2, [@generic={0x86, 0x1, "cab296eb564ce0b09c27c09b7a546d97a92f07b57e40ef186ef8a47bdc177613e4e87be0d1f0573be8b81879f7d3796196ac422ec8a3b511a9ffa37ebfd252864918ae76317eab08e93ca75a6557a34617bd95581c3db330d44499eb873b58d931f776279edbee3cf920c0c0b89f4adc5acecd99e39c2bd7e2bad237ee86e4127bc6b678"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x3, 0x80, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x2, 0x9, [@generic={0xe2, 0x8, "386039b1826f2557e8a25e62fe7823bd97adee6d326c28d3036d719c5fb732163a47fc5a84442fcaa965210747b5056a7e51245654a064900ef8b091f4d2b0722863c49ad9aa997f539dc6a8e33b2f08cae0f89a35bb745aa635f4c0fc80a19c2567ff45a160234b69a3522b6bf40b226f5b3475dea0c1b580e9e30894d8d48ee52a015916ebc281621f9947aaf945f22a63aed8cf9443749855a0e7e20d9b584eb42f08b9c29881b29901b3476465fd74eb7014ff6b9dfda60300dfce359d88caf0ea4184e1b1749eaaea7417e6b6566bd59f313e67be0b41bb3ff5e25d0dcb"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x40, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x20, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x9}, @generic={0xaa, 0x1, "d1a40e4fdfceccf62e02b8b7557bd1e662c2fc10122462946dfe2be4dc1cf55f9fa465ccd55d106aac69f551c36e7fc99a947d7ff6d36e056b03be7c53700f6acdb066f6fab0c033398ebd885e8a6b793c76e10ab312831cdd7307de54294ca7a9a49ef03e8de8f0746d17fac7f616391fa58744a27ab1fbaa6d7b14de11a82c3c8f2626a86b407b65d55365174d4cfffb6f954a6d1e59ce03018ebb2fa34caf8712536212ac58f6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7, 0xaa, 0x7f}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x81, 0x3, [@generic={0x43, 0xb, "a4f21c0d3f1f3f23500d1c536e4794117bb0e78158702a3fe844a0f71a7e0725e691d20cabff837e06f27d59f8184dc8f920b8660fb4321f13456c366a0c05f3d0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x81, 0x1f, [@generic={0xd4, 0x22, "20e38557430e5cf32da044d95a6598331de53569979c641b7d396546e868ede4554dd5d9701f00800460b26ec6e75eeb2a5e6e6a2b3aa63376005485800cef8178684bac870022ceaf5e60e2e8a58744ad96b0daa5696ca338220a8dc59fd31cb4c99475cf133776a354c1c75303c33e1fb1d6bd6deacb42bc47e39ee044fe943a430c2bba3349d3716f66711ba2ee35a2611486502ad9a21853eea856765a98d5b5e15be4d1cb229ce6cecb22e97022e65a5fad43e6f09d8850e1c396f35fd92f68045b69bba996d9b800420288012f745e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x6, 0x5, 0x80}}]}}, {{0x9, 0x4, 0xc1, 0x9, 0xb, 0xff, 0x3, 0x36, 0x11, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x85b, 0x5, 0x4, "6004bb92d10610"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0x2e, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xfe, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8000}, @generic={0x89, 0x30, "acf0bbb14c3fa24f744e8c83b871433d814ed15779cb0c6ce425f76f234e1951a08a613c0f22f4528f4ed39af6f5a9046695979f2ff30dee29705000e57c6021bee958f2347ac7f71bcdddee754ae6dc53e8e7c03bd729d6a71ecebb0bbaa31cb172cc15a60a9ea7d8055818f3e02a50870b07aee1f4ab2a7993ff38ab19c3a380d4e9d090fb72"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x84, 0x0, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0xff, 0x8, 0xa6, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x6, 0x1f, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x19}}, {{0x9, 0x5, 0xc, 0x8, 0x428, 0x2, 0x20, 0x1f}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x8c, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x78, 0x6d, [@generic={0xe9, 0xd, "4e77143c19364d71cbdc0d2dbc89323775b14b62346d0f960d614d8e1074ff28ef2896f8c0af748b0e0ab8775fcf28ba0928e71c9c5c9aacf1eaf1ca08de02a60ce90a1646a382530e8621fc84c5c32959153accad0cc398fea85ce69ba46730b8ccd05d320f5f7d789cdf7c939e1ad62a68bace873b9870504d2e561ab8facd45c9553490004dacfc024e81f82bab7f453a46782fa841b905966997cbe573cb669bcfc00f88a0e3f66bcb18018abcd289ff1f5525361cd4d0d91a92e528611bd09017660a4aa660bd90d09f434b49bbdfa99f0b51eead3e0de8e0c65d31f04bc5d4265640aee2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x40a}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0x3f, 0x81, 0x10, 0x8}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "eed8d3be656738c3518ffba3d91af456"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x20}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}]}) (async) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x2000000, [{0x9}, {0x2a, 0x7f}]}, 0x14, 0x1) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0xff, {{0xa, 0x4e24, 0x7, @local}}}, 0x88) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) semtimedop(0x0, &(0x7f0000001c00)=[{0x1, 0x4, 0x800}, {0x0, 0x3, 0x1000}], 0x2, &(0x7f0000001c40)={0x0, 0x989680}) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x3a, {0x3a, 0x2b, "74da1f1e92428e5e1d58bad59a6446dcb6f4ebbb08692ced1219cd052fc0c53dd3794fd221bb1dc2b9585d0488263b50e0a5cf128527bd2f"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f00000003c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x48, "e813924b360908f535fd35df925570bb"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x8, 0x7, "b17f104b", "7b146802"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x60, 0x3, 0xff, 0x1f, 0x6, 0x7}}}, &(0x7f0000001440)={0x84, &(0x7f0000001000)={0x20, 0x7, 0xc9, "08cbfe3e7611f4e3307a207116d19496d27b37fd8ab64cf511bd6f8160e5de222a8cb7f2fc54db1829f9ba044f60da2242497845d6f58cdf308b7d7ae1e29282830b77bec95814ebbba3efbd810416febe34bf55518d6ef7a7cc31238d25e63acb3a79689220ed9d3435585fef9a22b656633280ffeb44e7acb88c669b3c4c8f9169e4ab546357aaa4b88cef42585b29a8aa33df40f34aaeea9968bab8bd7da0792736c59d295d48f424a2233b4ca16e04e151aa5d31aad56e9005be44683339672755d277ad9e6939"}, 0xfffffffffffffffe, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f460"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001300)={0x40, 0x19, 0x2, "8b77"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000001c80)={'veth0_to_bond\x00'}) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) semget$private(0x0, 0x1, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x431300, 0x0) (async, rerun: 32) r6 = syz_usb_connect(0x3, 0x21a, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0xdb, 0xa6, 0x5a, 0x8, 0x48d, 0x9005, 0x1105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x208, 0x2, 0x1, 0xfb, 0x30, 0xcc, [{{0x9, 0x4, 0x1a, 0xf0, 0x4, 0xa1, 0xe6, 0xd0, 0x20, [@hid_hid={0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5ba}}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0xb9, "e373", "e2ad66"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xe, 0x5, 0x20, "daf6c1ea2e729faa"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xdf, 0x3, 0x6, 0x6, "cb9f77425e47672cba"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xfe, 0x6, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x2, 0x5c, 0x7, [@generic={0x3c, 0x31, "c26d74c59360af229c837598ec8cfd2fc7d9a0ac039e12535952ffa99a975d324aa9baa116143558c5989dc7ab71d075a0031e388193e4d9b688"}, @generic={0x5b, 0x23, "6c0f04db456b724cc8b1deaf37b1bfe656cca410fbbf761f4583cbfbd24e1ddd956ef7e6146a23423c7e68f5cca5c94a1e58db6bd8044cf52366ef55ea7b1520bcd2868abb06e6c9e7ab20c25c6239dc7fba8b7801bb486c48"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x20, 0xe1, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xdf00}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1ff}]}}]}}, {{0x9, 0x4, 0x25, 0x0, 0x6, 0x15, 0xb8, 0x15, 0xfa, [@generic={0xc, 0x5, "192518d0f6fd58d2ffd7"}], [{{0x9, 0x5, 0xa, 0x3, 0x0, 0x9, 0x7d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x3, 0x90d}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x8, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x20, 0x70, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}, @generic={0x7, 0x1, "48b261cc9e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x48, 0x13, 0x2, [@generic={0x64, 0x31, "e7d4c7940da613abe17d783b559dfa86dc59863463af471660363547635a1a933e9efa3e2b1530ffc80e42379222f4ec052998a7e64ee9ca1f3703e959a633be4664bf565800236d718e207f19fcc3d4b8c354ff0e186e1a89d176f71bbbbbaefadd"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xa, 0x61, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f}]}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0x20, 0x1, 0x5b, 0x40, 0x3f}, 0xe2, &(0x7f0000001800)=ANY=[@ANYBLOB="050fe20003036a55b08109a6437d333a529d363383fa83a602792ce49b21b69ce043771581869af3305d0e0845ceb35856f862792cccd8eda1d6f069f0952d2c24f60abcdd2442a600a42ce6ac91b45e76425938234e2d1f0125b41738abf8288b2867fc17a6f3fbbe7aedce5f6a194d2216d173a2dcf76907ab4a41b0ac63f451f6daf2d3b2aced9bcb8d0b3c671f5a2700ce99ae65b4073a51af7b568ea6205b6bcf3c50f75a07b3eaeeb0d2d08e9d0ebaec5fb7da64548c278b5e86dea0bad707a987b5086dada363f312cb5ee429bb28bc9649983567aea43f9ac5216c6ff554"], 0x1, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x200a}}]}) (rerun: 32) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001a80)={0x14, &(0x7f0000001980)={0x20, 0xc, 0x9e, {0x9e, 0x5, "4c71a2cc85849eda5b106d695c121a2a3d2628cfd41d382976ab7604f4d768aa725357a54509e77cea649c32d90545e1ff14169efdd117ded7633f7e89bb65dbd06a96d70986ccb89b030d8c52de102bfb45f4baf44e936034f517897f79ecdb4f2d81d5b0f9bee5c86fd25ec42e53e31d9baa7281f045383a659c824cb6dda4c1367fe59953c261fa940a34f0e6dbf4abee6383b526bc7533b3d721"}}, &(0x7f0000001a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x1c, &(0x7f0000001ac0)={0x20, 0xd, 0x58, "afba3eed37bca20583b35274baf289e9eefee6bf9dd6c82e974afd5941915123066d2d8a84f63eac710eaea16ce9c7b369235e08962db7dd156294f83b6667949ad439da8a7326adf46f56060d2cf56142a6ef6d64882cd5"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x9d}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 13:28:40 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r2, 0x0, 0x3d8aea, 0x0, 0x2, 0xd070e}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/bluetooth', 0x301040, 0x8) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x6, 0xfffffff9, 0x400, 0x0, 0x80}) 13:28:40 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:40 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x6) 13:28:40 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000400)="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", 0x1000, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6a}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1107.891466][T23981] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:40 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x1, 0x6) 13:28:40 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1107.937267][T23984] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:40 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r2, 0x0, 0x3d8aea, 0x0, 0x2, 0xd070e}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/bluetooth', 0x301040, 0x8) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x6, 0xfffffff9, 0x400, 0x0, 0x80}) 13:28:40 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000400)="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", 0x1000, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000400)="74b592538051016abe0ef371d7cc244b782836d0e1fc0516301f375e6bc6a1c954cb1655c91f20d09d06c4bcf09fb3ffb0c1c0c1c233f5f2a7eb24300507463039789bd9c68b522344e9930ac3ca8506b67611e1e3ab11959bcefa92c3da6c53293853f7e92964d4240b5dcfaba4807831a77d1290428ee0e4953374d9336b017a139d9d28224e555266cdf332297d92f8927a557d90d2f5497dee5dac1312652cc0b1775bc2795c95ac5410b9481dc49bdcc9ae40ba8fd3474e780c93294fa654ea11ba4de90848a1d4472c299da25bcad62047cc0a421f769bf48303714e1b649b0453c71c969234e6adccc453a0e8da07ba6892ae74551e85c45a8697f8277e5f41429d8ccaffcf225ea84b7a9a5e6eb9237524c7242551f4fa21f1f9b78e4d68c356a6ab85eaeb57343ab38f77095cac37f5acde2c565a56f376fa303ce863ac9a301004c07934d4e743ac455e0e4858414401c99a70738338fd8f97229d461b02739127dbcee1ef5c6a73acc92ec07d8e4882b788f0b0d54085905ab60e9f0701a4b994496870d768fd3fc01ae44ae996f059cfcff7a4a9d710931d811e2fe3316707cda906c7ec0d44e044bf7d288d821078ad6605c8fdcc76efc795a69ca32494a16d289dc1a46441676929f92aa4827f80ea1667adfe08f59bb12a37fbd3efd7b4b17a535edb12b9233091805ba68637bbd3181965c4345fc6bf96c7ba3ac3b00c6f2288408c1137d1d4d738333c3357826978153d85373f4b3449c4daeed32ec09201420f06170b6dd0caf0a7fb10a9c6c75041450b942f757fc6247b981da0b8cf9e43bc7f44e8c223735b090dde22cef426af5b73b7e329a990d2c4daacc2950234587e67f40fcab4e39ac57cece46f973d0bee184dc73014761efad6d25867a28725f775923025435a67d05fc9c3d7ae87f05395076d0486f0535de5c35d7bacf314e037b39bda1923379541c51513196345d5c17ed01f4d97e8b57c846b39dc818a1025cc771a7040c74d19b6b5d72f4d0d32f4183e75d36aa30cc841aaa2ce3f68cd7af23a1f184422c975296c6886a7c4d04c38becc3696bd410d1ee1f93430adc6bad4eda8e48332a383e9036a9c4269d6b999a560207a2c2345f680408ab219ea84b261dced90139afb35a03802b178de048a1b7cbbec2e8cab4ed8c55c5a8428f3d758821667a12c3600af4f2c25bcc881daca80bb4bf2bb4a4f7bae98f4f5d2ba1b035dc407fe8ce850d089b928854c7988e5088142310289d3928ff581286322530157a81ed3ca31cb7f3694f9e17ceaeb8c61612cbd146b90d9c79827bcc53ad8b4b3639439ac9e2ac427161c679719344333fcb66a5398b4573ceee74435322cf17de87c576644c40623c2cd316051ab5dd2d17fdfcf4ebe6f492097bee49bf258fe8fb7b48ca3b89a7a72c5e412a58b8658a0377406fbdd303a118d6eb0de9118028bb3be4bc31e968e5f3af8aa9330c4b53e8a1fd6c7188a70923a030e3bfa000e8919a5d0a5c5766a57f15f18f27a4d1206248be78ad2ea52b3550f53f0bdad4b0e3c48d413e209abde76bf495c539e1819dd21dbefe60d1f71b56549dab8ac9e58f47e2eeea2d1e426ae317b0af96737a788e2ec601610628bfc378c6484f6b6d272ea2d1233995ae037c734f851c9801dcc996be8d2844fd4d7b661c1d3aeb0d4bd35cbf28d5fceee47832f7c1e025d433659145861bfc75c6e9bce8b28fef717967ce63f7c24ee7afad65d83fa5d05f407762e399c2ca9aae8c4a6f382d0a02c394f3f9812961ed111eb53eb09f6deefe3149a500134476d86a61bc640659f7cd8cdb5cb10f0499d5663302fafb0669a74693ad02f587210ea4b1e770a4b34f506d7398c7cf0babd9f6df8267a6fd4782c266d11506744aac0bfda0a2d99665729ee0110f73a71f977265c8baf89e4e1cc7d55f2f4dc3edc8b3d7a1e49fc829b4b81a5c5f251a962da8b1fe27f19cd188418c4246ee35c974098b62d6bd554c7bb22dd22004f131403da3b167f01b1a201ff957beaf8f6b4655fba0b51d4dfe8bef8d06c9822b17491a0373b8b536afcc778801a6d3bf7c2e31a3d4b7f7cc66541c2426428eb79efe2bb14577131803a489905bad10c196fa25df8b184510523c7d1a8fab9d3c1a28b65ae9280e332ccea4dbbd072da2e458dd6262ca0bc5973298fb3c415294a63d41dbf5009736256e62b656a224cdf30e28c955c202c99e2f2dbaeffd6521b3f424b9dcad4dc1cb4d5d526f7fbc611527b8408ea7f79ff8c2db9ca26accada0a8fd2646590863a9ecb30e9de41324cff682804eea4b21598a017417389833c79d436d0aae2ff3a0dbb2148be5063e4e365e8c719e38da3e6be55bd899bd93a4ef6588b307b7edc7953a3adaf0c5303692457caf9c4cb0feeead612788596d76c74afbb0daa69eebd0a9ae8b679b79366dada7af0e729ab5e7bf56622ec5262a6f45e2437b2b7234e472e2258758a7675276e20994d2704f22475ac38532bed5136d7554a7b056ed2bd33ba7a7f08a79858ed26814030b8ef02b53f482f40c876c9bc53442efd008fcd3de71483dc85b9ffa3a9e84e018af9d2cd6ae18f10c6d906400f8fba2621a05920144b2c7ffc0304e93e1f9a75095504156d388e1997223dcf6f12e15e69e2a0c70acb5af33861b0aa98a5cb3002126b81fbfacf8ad0a2629857b49f0b4c8a01dbe770cbfb9326c4f3aedaf617f441e5f4adc5ae0a2184515e0f4289b805d00d2b660ef1df84fa0ed163b9cae1d5066754b4a4ea7e4c7b9080e27a82a8addc6c40c90755c47362aaeecd05092c04393eaf5fda0822196ef2f9bdf90ab44230763f1ad50648e9a23eaa8c900c077edf71255123a8899e7a4f63849f9affc906f1baf1963149e052b0f1e3a61f5aee2ccb8e9f529c307c39399028b2d5aa2d7f6882cfad832703ab900607d3c0f46242520fa21000fdcc677514fa1a1acf3bd392d8873ceea9806936fff294e1bf4ae872011bce1eed228869b27bbe03cd42f3a3bfe5e012bc5f24f963fb0fcf3ad29271548b1ff5a5570c7f70faa2192d86e83dd0eb1e46aebbb22ef8f578e138ed3e65b0dbbec3e73bd67261bd82b713cbca160beca98bc05d9d0859488fbb8844338ad85113d9cbea13cd7237f33f0480a1365133f5d6367db4a4946f872c98404df3aeb4528a913d47997a99b004443abf5b876eaf3eec067f57ba12a186ae9b018534c8b5af4097e0fbcadb070ee980d1821ed55e76abf3c3d11a5c486baaeeb4dc0333772d08b655026cfe8d0f0d18f8c7b345180a30975613b38010dc8109a875cfa5bbffe6cdf70ab53eba8ae342aa717568189b7672f4d595ad48411ec25f493e11da67dbfab7418c4a6d9a4f92081b2c7c9ad6c6867a769034bcefbcbd44a8e2071520da3228e14ca7290dcfca9fd059690ffc7a5e56b0285849a3a32759b5a8b27b2f0d88c2f33e88af9f02d8475f7afb073ec0ea3fbfb08158f8c068cfdf84447ac323e29a6c786c29ed256be5fa94a3ac06112d9bbe661802244116eb22324b037fa6d9e04dfb480e9278224229db1e804e1eb8013b48558fc8f9851fb4094c1dba5f7058de67fc9c598c7ea92cec43b995343ba5b25e83a5e9e4f0e82637c3bfdcc3278343b494dff118865af4a50b883ba06b6044cf7108ba144756a8268e4d3b249e894fd1ac8bc41fb180e78fa4ab04e9880ca296454ac109c3b4cfc29811a13af1c257593548470b24b31a3bd54324482eaaa824336ac8887c5e96bb7f18cb52ffbf0a9e420a661c3c25c7778f8b3d2486c32fe91f671d70121daf7369690cc9e1d46aaa427218df77b9323de4a124b077bec1e6d2696fe9ea4b487a4819f5604954f23a6f84253ab30c8ec56457372248dcfd67883b64bfb8dd3986b499515e1eac0bb9083130aa2a54bc0e5192b23b5908d843742a4680b788f2049ae26789f42a63f8cb0da294c49c2aa0b3d8dd17fc79b126f6b8259dbf09817e001c857f480918e952c2a96986273a5a2c9af65a78cb17b33bc07731667a08a8f8951979e805dbdd80764cf4d4a3de16d6cc3a42a4f64462723339602037b5b04454ec9bc984d67d9d543441db45d3a4200fbd94fdc2dcb3a2a0f335bf01b74db2034bdb9d3016a7b14377e0804311dbd48a4962a913738bae1f8b70c5b1f46c338f710b1b90796da3aa4b601a8392178b05df7fbdb66918f38491da3fc0f843174c7c1e67b94b0c536cb802f20678c4151fe07cdabfe527f65e41e27f5cef96db85326a4b2928a590950a2f5f8836a295b013afb4ced46402acd55704e0fd6f8981a03afd4d4660f3142c1fc71603ed0bd8a252c8b3dae450c3ce0b63a4216f1b76fbc0b268f11d50e4dd9082ba9d252a062db21a076f30eb7604c055a95a855dac40cf3ac5c760c1ce399a738f56272846b4d17a234d306d4870d21388ac2a33902caa9a825d40ffccbfb7094d24f869d98928407be259228739242a017c9664fdd2e4174076719393b97a90b3a6c2d5eea3b73be1ff88af6b57bf37286aa0290faee8ecf9e42016733e3df1ac4099183878fa17bd26bfb864b30e14e9452b282c3fd14114109f613a8fb58e59fbcd873c94aac910dd7e761bf4356088c2f8dde071df3ce55e28315d7b7d0846d47e2119a9b82d7a13480dad051d4c0efca00ca279f4841f7917d71b8b4c10361de211ae3118f9be3318ca62fd176b10904c070139eca6bbee4a6976fe8118f26a86c65399439cb0cf7959b5a4966dbc4052be7c654b5f26c078611b212f1512b7ab180fe79ad712093b8a074ef0236693f10a8fcfa9fbde1c193d10dd356f3e295f0210a828244ca954f924697fc18bcb2415ee59d1315865341cccf1bf4b645ba9305a574aaf2ff4b2310bc520f4995c9e58ef678cbd17bf80fffc602b62153e406d635252de315c57534fd45e74a65c85ee05d3427fee3bc413eca68e54e78e663ae6c13c931ec8b24054704fb746a6aed0d21832dae0b78ec1eefc75787264968227431bf3af700c47bdce402efcb3070e9324c549a7e8b7f2590e20a0df2687a5ec2237abed386c9c68f6ca0d097a352e8dcd98d144cb86858365ef1de3d4a56be77d13ab8be2e4a8aa597dde0789450bf8bde56dc4555f0f64e4031fa45ed603d12c1a1a348ac2243773260f1382412cb949e4e81e73fc50b727160726539fc9ade1985dd6c26ddc0c1c40d990ad45d6fed15a90156afa38d7b4ec395fb0f62b43a174d8a08950ab218c4768a5e9b855712991107690b5816ba538af4bc184e50dc0e2b00a472dc96fce73b40f4072d1990eedd53c715b231307deab989fc65f772d14be61485d4c4d11d090d17ef2640dcad87d0a8f5b46f9cf01035d097c9c748a5313da6866fa19ad339de2128da6300f3014d7cf878085fabfed6e96cb40868e3c837066a11ba568230ae60a4fb3e4bd634bbc8c99a72c1e852409d60172c33896a8aec341a279b8c578dfdbb286dcc7baf909b31342242761c3b286ab5eb5b0eb60800c630d158131111b456b797dc6b039934b61deb083845c2df593f05dd143a31b363d5f4ece922698725ba1029988534b202ce3da8d34334316739870416d0a608fc3afdc6d22a87ab16e72908f009a9819ea6ccc50a259205102c83c0c01a31ab21bbdcf5cc99f433ccb14b4b6bcc0cc24853da6a43db2dd6f43837ac232397e906b808c93c96977bcb5b5b8485f6d239664293d0d5d34eb7bae4cbb58790871bdc1670b19c49b5ffc626b0301476ad25b67635b450f49dc2380", 0x1000, 0x6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) 13:28:40 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xff, 0x81}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x3, 0x5}, 0x10) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000005e0288d0c18ddbc7ebc939c2632ce7cc52169401987ce25c466e415d6362f25427cca58ad51f75f9a5259c7c5b1edc6767b4d92f9b6a79b5dfe3d16b780ffcfb15b296952ec025fe806bb2d1356f3274a94a1e63c624e5db", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001140)={{r0}, "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"}) 13:28:40 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r4}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1108.164726][T23996] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1108.194585][T23998] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1108.273723][T17197] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1108.277802][T23998] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1108.483786][T17197] usb 5-1: device descriptor read/64, error -71 [ 1108.773590][T17197] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1108.963445][T17197] usb 5-1: device descriptor read/64, error -71 [ 1109.083622][T17197] usb usb5-port1: attempt power cycle [ 1109.493407][T17197] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1109.583684][T17197] usb 5-1: device descriptor read/8, error -71 [ 1109.869212][T17197] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1109.963695][T17197] usb 5-1: device descriptor read/8, error -71 [ 1110.100170][T17197] usb usb5-port1: unable to enumerate USB device 13:28:43 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11110000733336088dee1adb236100000001f9012d0001100000000904000003fe03010009cd8d1f00020000000905050200fe7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) syz_usb_connect(0x6, 0xa4c, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xc1, 0x9, 0xf8, 0xff, 0xcde, 0x6, 0x5b74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3a, 0x3, 0x6, 0x7f, 0xd0, 0xfa, [{{0x9, 0x4, 0x7a, 0xe7, 0x8, 0x63, 0x5a, 0xfd, 0x80, [@hid_hid={0x9, 0x21, 0x200, 0x81, 0x1, {0x22, 0x768}}], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x2, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0xff, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x242c47d7a169362e, 0xf3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x4, 0x40, [@generic={0xde, 0x22, "457ebcc95a27fa7232b959686e5eab71e50bf1fed27ddc0d79f5f67077bcc6e50b8e49a5a159da55c5c5ef9924b71bcdf2249e1890790002338e29c3b3edd4176970c1c07a162e35480ee3ee282b790f43dab737e4f3aec685017dc83076804bd409471e3b110a5b1e2334af80d7d674ce1e731c831898a2176609db3252eb826516e6cf2c7f97e650889c76db54e4d0a56f13e189fd55ff8b683e6aabdb038f5a63e5b80a8e1a9d96294cda8351862caa22c6dc1d4f12eda4c37c725f476914aa1f2ff72a7a0e2b75ed3b8052a9ae1233b87449ef7818bf082aa13e"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x430, 0x1, 0x6, 0x4, [@generic={0xcb, 0x22, "8f91fd34c7d66f4bd82ddd407ca1d0e0ee361c546805bfb4638e6d148014d91ec8140ff0910baa419ac6b025d7f28897de01fa12b9ffea8a94ac53c648cbb9148284c8795d860b95da7f74707739919e51cc6d05dc8b3714d8be5ca7c43a5bd78f9af8df4060271888127a3f77c483568910398937694f9d9e906cb7809ddb0bdd8dec6cc5227b31e4a7bc9ea80670196db81931686723f8959d953d7bdc47eee00cad2c31922008248ecd7079412be3f839b51790f5780f055d957a8800233c48dd4efab48fd87e73"}, @generic={0xaf, 0xa, "a3b99f5e85d6e2888d923e3e882ff46b671959ac17682fd1cbb610b312b8983401f21f5cc5421092daa8c1a1f182f9a0488433bcbd745fdf44d627dab19fe408c1d1690b8133001096fe9e5b8947da7a083266fbffb81558cccee6cf9d42439c315f7a8bb50dcec5bf68027520fcb943065821fb540743a299538aca8d4976dddcacc2eb903f64fd48de20e25c45829c24494a1255802d84507a238ccfc9a57c30f4d235052617b2adc9960c6a"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x5, 0x3, 0x5, [@generic={0x3e, 0x30, "285051acc7f7ed69a0c0c61416884fe58e0c1b1db88750b654b8a566a4e4475f9eff7c514ebaa75c81eb38b081fcee17090b745ce6e1051775f54e12"}, @generic={0x7e, 0x10, "0e9ee9ed144d336896ce98eb15ad75f633f74340b40a551c3c3d5d347e745151050d0089be83f12112d54c10b1f1cbc3925e31abb0e031ee84390d6a132df83ae92814abd43f2358a386ade2e44f7539405ec5a46a635651d4921c4e005abc9b3a2cd3e1244f71375e7536072d48a688d0558804e7060353dc2eb455"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x20, 0x5, 0x1f}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x9, 0x40, 0x0, [@generic={0x11, 0xd, "902193d001a0ada30bde947d4a703e"}, @generic={0xb9, 0x8, "02425e1d6ed851e327752905fb5d18ae693e6633e4dd68689de9af380688b80a45fa1257ef301ed8f9f497f8e022085c36fc1db1edbbe35919f5a5d4150975c1e283b2e270e3721587cb215aa128c5174b6543d7c5967d68402db72a69e1fa85108f1c196ca913f888598f3fc5782237af1e6ed949489d13e8c4b6e797986efff73361d162962bb6a14e4c69cfe557c6f575361a6704e74ab483024ddcf8006ee474fef832d94ff730a875ccd9448dc9e8e32bdc2a2e8e"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xc, 0x4c, 0x6f, 0xd9, 0x1f, [@hid_hid={0x9, 0x21, 0x20, 0x81, 0x1, {0x22, 0xde7}}], [{{0x9, 0x5, 0xc, 0x10, 0x3cf, 0x81, 0x2, 0xbc}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0xf6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3a, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x81, 0x9, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0xff, 0x82, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x14, 0x2, [@generic={0x86, 0x1, "cab296eb564ce0b09c27c09b7a546d97a92f07b57e40ef186ef8a47bdc177613e4e87be0d1f0573be8b81879f7d3796196ac422ec8a3b511a9ffa37ebfd252864918ae76317eab08e93ca75a6557a34617bd95581c3db330d44499eb873b58d931f776279edbee3cf920c0c0b89f4adc5acecd99e39c2bd7e2bad237ee86e4127bc6b678"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x3, 0x80, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x2, 0x9, [@generic={0xe2, 0x8, "386039b1826f2557e8a25e62fe7823bd97adee6d326c28d3036d719c5fb732163a47fc5a84442fcaa965210747b5056a7e51245654a064900ef8b091f4d2b0722863c49ad9aa997f539dc6a8e33b2f08cae0f89a35bb745aa635f4c0fc80a19c2567ff45a160234b69a3522b6bf40b226f5b3475dea0c1b580e9e30894d8d48ee52a015916ebc281621f9947aaf945f22a63aed8cf9443749855a0e7e20d9b584eb42f08b9c29881b29901b3476465fd74eb7014ff6b9dfda60300dfce359d88caf0ea4184e1b1749eaaea7417e6b6566bd59f313e67be0b41bb3ff5e25d0dcb"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x40, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x20, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x9}, @generic={0xaa, 0x1, "d1a40e4fdfceccf62e02b8b7557bd1e662c2fc10122462946dfe2be4dc1cf55f9fa465ccd55d106aac69f551c36e7fc99a947d7ff6d36e056b03be7c53700f6acdb066f6fab0c033398ebd885e8a6b793c76e10ab312831cdd7307de54294ca7a9a49ef03e8de8f0746d17fac7f616391fa58744a27ab1fbaa6d7b14de11a82c3c8f2626a86b407b65d55365174d4cfffb6f954a6d1e59ce03018ebb2fa34caf8712536212ac58f6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7, 0xaa, 0x7f}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x81, 0x3, [@generic={0x43, 0xb, "a4f21c0d3f1f3f23500d1c536e4794117bb0e78158702a3fe844a0f71a7e0725e691d20cabff837e06f27d59f8184dc8f920b8660fb4321f13456c366a0c05f3d0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x81, 0x1f, [@generic={0xd4, 0x22, "20e38557430e5cf32da044d95a6598331de53569979c641b7d396546e868ede4554dd5d9701f00800460b26ec6e75eeb2a5e6e6a2b3aa63376005485800cef8178684bac870022ceaf5e60e2e8a58744ad96b0daa5696ca338220a8dc59fd31cb4c99475cf133776a354c1c75303c33e1fb1d6bd6deacb42bc47e39ee044fe943a430c2bba3349d3716f66711ba2ee35a2611486502ad9a21853eea856765a98d5b5e15be4d1cb229ce6cecb22e97022e65a5fad43e6f09d8850e1c396f35fd92f68045b69bba996d9b800420288012f745e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x6, 0x5, 0x80}}]}}, {{0x9, 0x4, 0xc1, 0x9, 0xb, 0xff, 0x3, 0x36, 0x11, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x85b, 0x5, 0x4, "6004bb92d10610"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0x2e, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xfe, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8000}, @generic={0x89, 0x30, "acf0bbb14c3fa24f744e8c83b871433d814ed15779cb0c6ce425f76f234e1951a08a613c0f22f4528f4ed39af6f5a9046695979f2ff30dee29705000e57c6021bee958f2347ac7f71bcdddee754ae6dc53e8e7c03bd729d6a71ecebb0bbaa31cb172cc15a60a9ea7d8055818f3e02a50870b07aee1f4ab2a7993ff38ab19c3a380d4e9d090fb72"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x84, 0x0, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0xff, 0x8, 0xa6, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x6, 0x1f, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x19}}, {{0x9, 0x5, 0xc, 0x8, 0x428, 0x2, 0x20, 0x1f}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x8c, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x78, 0x6d, [@generic={0xe9, 0xd, "4e77143c19364d71cbdc0d2dbc89323775b14b62346d0f960d614d8e1074ff28ef2896f8c0af748b0e0ab8775fcf28ba0928e71c9c5c9aacf1eaf1ca08de02a60ce90a1646a382530e8621fc84c5c32959153accad0cc398fea85ce69ba46730b8ccd05d320f5f7d789cdf7c939e1ad62a68bace873b9870504d2e561ab8facd45c9553490004dacfc024e81f82bab7f453a46782fa841b905966997cbe573cb669bcfc00f88a0e3f66bcb18018abcd289ff1f5525361cd4d0d91a92e528611bd09017660a4aa660bd90d09f434b49bbdfa99f0b51eead3e0de8e0c65d31f04bc5d4265640aee2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x40a}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0x3f, 0x81, 0x10, 0x8}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "eed8d3be656738c3518ffba3d91af456"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x20}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}]}) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x2000000, [{0x9}, {0x2a, 0x7f}]}, 0x14, 0x1) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0xff, {{0xa, 0x4e24, 0x7, @local}}}, 0x88) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) (async) semtimedop(0x0, &(0x7f0000001c00)=[{0x1, 0x4, 0x800}, {0x0, 0x3, 0x1000}], 0x2, &(0x7f0000001c40)={0x0, 0x989680}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0x3, 0x3a, {0x3a, 0x2b, "74da1f1e92428e5e1d58bad59a6446dcb6f4ebbb08692ced1219cd052fc0c53dd3794fd221bb1dc2b9585d0488263b50e0a5cf128527bd2f"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f00000003c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x48, "e813924b360908f535fd35df925570bb"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x8, 0x7, "b17f104b", "7b146802"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x60, 0x3, 0xff, 0x1f, 0x6, 0x7}}}, &(0x7f0000001440)={0x84, &(0x7f0000001000)={0x20, 0x7, 0xc9, "08cbfe3e7611f4e3307a207116d19496d27b37fd8ab64cf511bd6f8160e5de222a8cb7f2fc54db1829f9ba044f60da2242497845d6f58cdf308b7d7ae1e29282830b77bec95814ebbba3efbd810416febe34bf55518d6ef7a7cc31238d25e63acb3a79689220ed9d3435585fef9a22b656633280ffeb44e7acb88c669b3c4c8f9169e4ab546357aaa4b88cef42585b29a8aa33df40f34aaeea9968bab8bd7da0792736c59d295d48f424a2233b4ca16e04e151aa5d31aad56e9005be44683339672755d277ad9e6939"}, 0xfffffffffffffffe, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f460"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001300)={0x40, 0x19, 0x2, "8b77"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000001c80)={'veth0_to_bond\x00'}) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r4, 0x0) (async) semget$private(0x0, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x431300, 0x0) (async) r6 = syz_usb_connect(0x3, 0x21a, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0xdb, 0xa6, 0x5a, 0x8, 0x48d, 0x9005, 0x1105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x208, 0x2, 0x1, 0xfb, 0x30, 0xcc, [{{0x9, 0x4, 0x1a, 0xf0, 0x4, 0xa1, 0xe6, 0xd0, 0x20, [@hid_hid={0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5ba}}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0xb9, "e373", "e2ad66"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xe, 0x5, 0x20, "daf6c1ea2e729faa"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xdf, 0x3, 0x6, 0x6, "cb9f77425e47672cba"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xfe, 0x6, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x2, 0x5c, 0x7, [@generic={0x3c, 0x31, "c26d74c59360af229c837598ec8cfd2fc7d9a0ac039e12535952ffa99a975d324aa9baa116143558c5989dc7ab71d075a0031e388193e4d9b688"}, @generic={0x5b, 0x23, "6c0f04db456b724cc8b1deaf37b1bfe656cca410fbbf761f4583cbfbd24e1ddd956ef7e6146a23423c7e68f5cca5c94a1e58db6bd8044cf52366ef55ea7b1520bcd2868abb06e6c9e7ab20c25c6239dc7fba8b7801bb486c48"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x20, 0xe1, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xdf00}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1ff}]}}]}}, {{0x9, 0x4, 0x25, 0x0, 0x6, 0x15, 0xb8, 0x15, 0xfa, [@generic={0xc, 0x5, "192518d0f6fd58d2ffd7"}], [{{0x9, 0x5, 0xa, 0x3, 0x0, 0x9, 0x7d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x3, 0x90d}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x8, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x20, 0x70, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}, @generic={0x7, 0x1, "48b261cc9e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x48, 0x13, 0x2, [@generic={0x64, 0x31, "e7d4c7940da613abe17d783b559dfa86dc59863463af471660363547635a1a933e9efa3e2b1530ffc80e42379222f4ec052998a7e64ee9ca1f3703e959a633be4664bf565800236d718e207f19fcc3d4b8c354ff0e186e1a89d176f71bbbbbaefadd"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xa, 0x61, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f}]}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0x20, 0x1, 0x5b, 0x40, 0x3f}, 0xe2, &(0x7f0000001800)=ANY=[@ANYBLOB="050fe20003036a55b08109a6437d333a529d363383fa83a602792ce49b21b69ce043771581869af3305d0e0845ceb35856f862792cccd8eda1d6f069f0952d2c24f60abcdd2442a600a42ce6ac91b45e76425938234e2d1f0125b41738abf8288b2867fc17a6f3fbbe7aedce5f6a194d2216d173a2dcf76907ab4a41b0ac63f451f6daf2d3b2aced9bcb8d0b3c671f5a2700ce99ae65b4073a51af7b568ea6205b6bcf3c50f75a07b3eaeeb0d2d08e9d0ebaec5fb7da64548c278b5e86dea0bad707a987b5086dada363f312cb5ee429bb28bc9649983567aea43f9ac5216c6ff554"], 0x1, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001a80)={0x14, &(0x7f0000001980)={0x20, 0xc, 0x9e, {0x9e, 0x5, "4c71a2cc85849eda5b106d695c121a2a3d2628cfd41d382976ab7604f4d768aa725357a54509e77cea649c32d90545e1ff14169efdd117ded7633f7e89bb65dbd06a96d70986ccb89b030d8c52de102bfb45f4baf44e936034f517897f79ecdb4f2d81d5b0f9bee5c86fd25ec42e53e31d9baa7281f045383a659c824cb6dda4c1367fe59953c261fa940a34f0e6dbf4abee6383b526bc7533b3d721"}}, &(0x7f0000001a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x1c, &(0x7f0000001ac0)={0x20, 0xd, 0x58, "afba3eed37bca20583b35274baf289e9eefee6bf9dd6c82e974afd5941915123066d2d8a84f63eac710eaea16ce9c7b369235e08962db7dd156294f83b6667949ad439da8a7326adf46f56060d2cf56142a6ef6d64882cd5"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x9d}}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 13:28:43 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r2, 0x0, 0x3d8aea, 0x0, 0x2, 0xd070e}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/bluetooth', 0x301040, 0x8) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x6, 0xfffffff9, 0x400, 0x0, 0x80}) 13:28:43 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r3, 0x0, &(0x7f0000000200)="c960cf22183b92d776fd2678dc82744cd8b0ab9ca493174c6b41ef21cb13e62669f065226eb43ec7f109dfbdc552ac5cb8f7a972c9c1e404b3f91c15cc4620dffd0291b940ba1825e56e56aded13942a215ee2de857acd4aa21d29f3e2b0abf9ba34a718c4786e309869cb1afb044236d2b2db5f2fe6a9c33e1a3073f76faa8e75dcea7cb1dbdedfdc628b4e0db4b01abb0cd89efb0a0592c0ca50ab71b0bbc41c21a5934fdb95a20fd31486c578c30dab68df0b2495b16c7c2e05ad450dc78cfeb0a729ab7296cc2cbb3cf0001ace148415392a9b679ad1d6c0dc4e0dc9ffb559cc15cf49768d513b28cff69f006bb6412e", 0xf2, 0x6}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='totmaps\x00') ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000080)={0x5, r7}) 13:28:43 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xff, 0x81}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xff, 0x81}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x3, 0x5}, 0x10) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000005e0288d0c18ddbc7ebc939c2632ce7cc52169401987ce25c466e415d6362f25427cca58ad51f75f9a5259c7c5b1edc6767b4d92f9b6a79b5dfe3d16b780ffcfb15b296952ec025fe806bb2d1356f3274a94a1e63c624e5db", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001140)={{r0}, "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"}) 13:28:43 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000400)="74b592538051016abe0ef371d7cc244b782836d0e1fc0516301f375e6bc6a1c954cb1655c91f20d09d06c4bcf09fb3ffb0c1c0c1c233f5f2a7eb24300507463039789bd9c68b522344e9930ac3ca8506b67611e1e3ab11959bcefa92c3da6c53293853f7e92964d4240b5dcfaba4807831a77d1290428ee0e4953374d9336b017a139d9d28224e555266cdf332297d92f8927a557d90d2f5497dee5dac1312652cc0b1775bc2795c95ac5410b9481dc49bdcc9ae40ba8fd3474e780c93294fa654ea11ba4de90848a1d4472c299da25bcad62047cc0a421f769bf48303714e1b649b0453c71c969234e6adccc453a0e8da07ba6892ae74551e85c45a8697f8277e5f41429d8ccaffcf225ea84b7a9a5e6eb9237524c7242551f4fa21f1f9b78e4d68c356a6ab85eaeb57343ab38f77095cac37f5acde2c565a56f376fa303ce863ac9a301004c07934d4e743ac455e0e4858414401c99a70738338fd8f97229d461b02739127dbcee1ef5c6a73acc92ec07d8e4882b788f0b0d54085905ab60e9f0701a4b994496870d768fd3fc01ae44ae996f059cfcff7a4a9d710931d811e2fe3316707cda906c7ec0d44e044bf7d288d821078ad6605c8fdcc76efc795a69ca32494a16d289dc1a46441676929f92aa4827f80ea1667adfe08f59bb12a37fbd3efd7b4b17a535edb12b9233091805ba68637bbd3181965c4345fc6bf96c7ba3ac3b00c6f2288408c1137d1d4d738333c3357826978153d85373f4b3449c4daeed32ec09201420f06170b6dd0caf0a7fb10a9c6c75041450b942f757fc6247b981da0b8cf9e43bc7f44e8c223735b090dde22cef426af5b73b7e329a990d2c4daacc2950234587e67f40fcab4e39ac57cece46f973d0bee184dc73014761efad6d25867a28725f775923025435a67d05fc9c3d7ae87f05395076d0486f0535de5c35d7bacf314e037b39bda1923379541c51513196345d5c17ed01f4d97e8b57c846b39dc818a1025cc771a7040c74d19b6b5d72f4d0d32f4183e75d36aa30cc841aaa2ce3f68cd7af23a1f184422c975296c6886a7c4d04c38becc3696bd410d1ee1f93430adc6bad4eda8e48332a383e9036a9c4269d6b999a560207a2c2345f680408ab219ea84b261dced90139afb35a03802b178de048a1b7cbbec2e8cab4ed8c55c5a8428f3d758821667a12c3600af4f2c25bcc881daca80bb4bf2bb4a4f7bae98f4f5d2ba1b035dc407fe8ce850d089b928854c7988e5088142310289d3928ff581286322530157a81ed3ca31cb7f3694f9e17ceaeb8c61612cbd146b90d9c79827bcc53ad8b4b3639439ac9e2ac427161c679719344333fcb66a5398b4573ceee74435322cf17de87c576644c40623c2cd316051ab5dd2d17fdfcf4ebe6f492097bee49bf258fe8fb7b48ca3b89a7a72c5e412a58b8658a0377406fbdd303a118d6eb0de9118028bb3be4bc31e968e5f3af8aa9330c4b53e8a1fd6c7188a70923a030e3bfa000e8919a5d0a5c5766a57f15f18f27a4d1206248be78ad2ea52b3550f53f0bdad4b0e3c48d413e209abde76bf495c539e1819dd21dbefe60d1f71b56549dab8ac9e58f47e2eeea2d1e426ae317b0af96737a788e2ec601610628bfc378c6484f6b6d272ea2d1233995ae037c734f851c9801dcc996be8d2844fd4d7b661c1d3aeb0d4bd35cbf28d5fceee47832f7c1e025d433659145861bfc75c6e9bce8b28fef717967ce63f7c24ee7afad65d83fa5d05f407762e399c2ca9aae8c4a6f382d0a02c394f3f9812961ed111eb53eb09f6deefe3149a500134476d86a61bc640659f7cd8cdb5cb10f0499d5663302fafb0669a74693ad02f587210ea4b1e770a4b34f506d7398c7cf0babd9f6df8267a6fd4782c266d11506744aac0bfda0a2d99665729ee0110f73a71f977265c8baf89e4e1cc7d55f2f4dc3edc8b3d7a1e49fc829b4b81a5c5f251a962da8b1fe27f19cd188418c4246ee35c974098b62d6bd554c7bb22dd22004f131403da3b167f01b1a201ff957beaf8f6b4655fba0b51d4dfe8bef8d06c9822b17491a0373b8b536afcc778801a6d3bf7c2e31a3d4b7f7cc66541c2426428eb79efe2bb14577131803a489905bad10c196fa25df8b184510523c7d1a8fab9d3c1a28b65ae9280e332ccea4dbbd072da2e458dd6262ca0bc5973298fb3c415294a63d41dbf5009736256e62b656a224cdf30e28c955c202c99e2f2dbaeffd6521b3f424b9dcad4dc1cb4d5d526f7fbc611527b8408ea7f79ff8c2db9ca26accada0a8fd2646590863a9ecb30e9de41324cff682804eea4b21598a017417389833c79d436d0aae2ff3a0dbb2148be5063e4e365e8c719e38da3e6be55bd899bd93a4ef6588b307b7edc7953a3adaf0c5303692457caf9c4cb0feeead612788596d76c74afbb0daa69eebd0a9ae8b679b79366dada7af0e729ab5e7bf56622ec5262a6f45e2437b2b7234e472e2258758a7675276e20994d2704f22475ac38532bed5136d7554a7b056ed2bd33ba7a7f08a79858ed26814030b8ef02b53f482f40c876c9bc53442efd008fcd3de71483dc85b9ffa3a9e84e018af9d2cd6ae18f10c6d906400f8fba2621a05920144b2c7ffc0304e93e1f9a75095504156d388e1997223dcf6f12e15e69e2a0c70acb5af33861b0aa98a5cb3002126b81fbfacf8ad0a2629857b49f0b4c8a01dbe770cbfb9326c4f3aedaf617f441e5f4adc5ae0a2184515e0f4289b805d00d2b660ef1df84fa0ed163b9cae1d5066754b4a4ea7e4c7b9080e27a82a8addc6c40c90755c47362aaeecd05092c04393eaf5fda0822196ef2f9bdf90ab44230763f1ad50648e9a23eaa8c900c077edf71255123a8899e7a4f63849f9affc906f1baf1963149e052b0f1e3a61f5aee2ccb8e9f529c307c39399028b2d5aa2d7f6882cfad832703ab900607d3c0f46242520fa21000fdcc677514fa1a1acf3bd392d8873ceea9806936fff294e1bf4ae872011bce1eed228869b27bbe03cd42f3a3bfe5e012bc5f24f963fb0fcf3ad29271548b1ff5a5570c7f70faa2192d86e83dd0eb1e46aebbb22ef8f578e138ed3e65b0dbbec3e73bd67261bd82b713cbca160beca98bc05d9d0859488fbb8844338ad85113d9cbea13cd7237f33f0480a1365133f5d6367db4a4946f872c98404df3aeb4528a913d47997a99b004443abf5b876eaf3eec067f57ba12a186ae9b018534c8b5af4097e0fbcadb070ee980d1821ed55e76abf3c3d11a5c486baaeeb4dc0333772d08b655026cfe8d0f0d18f8c7b345180a30975613b38010dc8109a875cfa5bbffe6cdf70ab53eba8ae342aa717568189b7672f4d595ad48411ec25f493e11da67dbfab7418c4a6d9a4f92081b2c7c9ad6c6867a769034bcefbcbd44a8e2071520da3228e14ca7290dcfca9fd059690ffc7a5e56b0285849a3a32759b5a8b27b2f0d88c2f33e88af9f02d8475f7afb073ec0ea3fbfb08158f8c068cfdf84447ac323e29a6c786c29ed256be5fa94a3ac06112d9bbe661802244116eb22324b037fa6d9e04dfb480e9278224229db1e804e1eb8013b48558fc8f9851fb4094c1dba5f7058de67fc9c598c7ea92cec43b995343ba5b25e83a5e9e4f0e82637c3bfdcc3278343b494dff118865af4a50b883ba06b6044cf7108ba144756a8268e4d3b249e894fd1ac8bc41fb180e78fa4ab04e9880ca296454ac109c3b4cfc29811a13af1c257593548470b24b31a3bd54324482eaaa824336ac8887c5e96bb7f18cb52ffbf0a9e420a661c3c25c7778f8b3d2486c32fe91f671d70121daf7369690cc9e1d46aaa427218df77b9323de4a124b077bec1e6d2696fe9ea4b487a4819f5604954f23a6f84253ab30c8ec56457372248dcfd67883b64bfb8dd3986b499515e1eac0bb9083130aa2a54bc0e5192b23b5908d843742a4680b788f2049ae26789f42a63f8cb0da294c49c2aa0b3d8dd17fc79b126f6b8259dbf09817e001c857f480918e952c2a96986273a5a2c9af65a78cb17b33bc07731667a08a8f8951979e805dbdd80764cf4d4a3de16d6cc3a42a4f64462723339602037b5b04454ec9bc984d67d9d543441db45d3a4200fbd94fdc2dcb3a2a0f335bf01b74db2034bdb9d3016a7b14377e0804311dbd48a4962a913738bae1f8b70c5b1f46c338f710b1b90796da3aa4b601a8392178b05df7fbdb66918f38491da3fc0f843174c7c1e67b94b0c536cb802f20678c4151fe07cdabfe527f65e41e27f5cef96db85326a4b2928a590950a2f5f8836a295b013afb4ced46402acd55704e0fd6f8981a03afd4d4660f3142c1fc71603ed0bd8a252c8b3dae450c3ce0b63a4216f1b76fbc0b268f11d50e4dd9082ba9d252a062db21a076f30eb7604c055a95a855dac40cf3ac5c760c1ce399a738f56272846b4d17a234d306d4870d21388ac2a33902caa9a825d40ffccbfb7094d24f869d98928407be259228739242a017c9664fdd2e4174076719393b97a90b3a6c2d5eea3b73be1ff88af6b57bf37286aa0290faee8ecf9e42016733e3df1ac4099183878fa17bd26bfb864b30e14e9452b282c3fd14114109f613a8fb58e59fbcd873c94aac910dd7e761bf4356088c2f8dde071df3ce55e28315d7b7d0846d47e2119a9b82d7a13480dad051d4c0efca00ca279f4841f7917d71b8b4c10361de211ae3118f9be3318ca62fd176b10904c070139eca6bbee4a6976fe8118f26a86c65399439cb0cf7959b5a4966dbc4052be7c654b5f26c078611b212f1512b7ab180fe79ad712093b8a074ef0236693f10a8fcfa9fbde1c193d10dd356f3e295f0210a828244ca954f924697fc18bcb2415ee59d1315865341cccf1bf4b645ba9305a574aaf2ff4b2310bc520f4995c9e58ef678cbd17bf80fffc602b62153e406d635252de315c57534fd45e74a65c85ee05d3427fee3bc413eca68e54e78e663ae6c13c931ec8b24054704fb746a6aed0d21832dae0b78ec1eefc75787264968227431bf3af700c47bdce402efcb3070e9324c549a7e8b7f2590e20a0df2687a5ec2237abed386c9c68f6ca0d097a352e8dcd98d144cb86858365ef1de3d4a56be77d13ab8be2e4a8aa597dde0789450bf8bde56dc4555f0f64e4031fa45ed603d12c1a1a348ac2243773260f1382412cb949e4e81e73fc50b727160726539fc9ade1985dd6c26ddc0c1c40d990ad45d6fed15a90156afa38d7b4ec395fb0f62b43a174d8a08950ab218c4768a5e9b855712991107690b5816ba538af4bc184e50dc0e2b00a472dc96fce73b40f4072d1990eedd53c715b231307deab989fc65f772d14be61485d4c4d11d090d17ef2640dcad87d0a8f5b46f9cf01035d097c9c748a5313da6866fa19ad339de2128da6300f3014d7cf878085fabfed6e96cb40868e3c837066a11ba568230ae60a4fb3e4bd634bbc8c99a72c1e852409d60172c33896a8aec341a279b8c578dfdbb286dcc7baf909b31342242761c3b286ab5eb5b0eb60800c630d158131111b456b797dc6b039934b61deb083845c2df593f05dd143a31b363d5f4ece922698725ba1029988534b202ce3da8d34334316739870416d0a608fc3afdc6d22a87ab16e72908f009a9819ea6ccc50a259205102c83c0c01a31ab21bbdcf5cc99f433ccb14b4b6bcc0cc24853da6a43db2dd6f43837ac232397e906b808c93c96977bcb5b5b8485f6d239664293d0d5d34eb7bae4cbb58790871bdc1670b19c49b5ffc626b0301476ad25b67635b450f49dc2380", 0x1000, 0x6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r4, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r2, 0x0, 0x7ffffffc00000002}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x70}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:43 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xff, 0x81}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x3, 0x5}, 0x10) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000005e0288d0c18ddbc7ebc939c2632ce7cc52169401987ce25c466e415d6362f25427cca58ad51f75f9a5259c7c5b1edc6767b4d92f9b6a79b5dfe3d16b780ffcfb15b296952ec025fe806bb2d1356f3274a94a1e63c624e5db", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001140)={{r0}, "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"}) [ 1111.001902][T24011] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1111.035284][T24015] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:43 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r3}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r3, 0x0, &(0x7f0000000200)="c960cf22183b92d776fd2678dc82744cd8b0ab9ca493174c6b41ef21cb13e62669f065226eb43ec7f109dfbdc552ac5cb8f7a972c9c1e404b3f91c15cc4620dffd0291b940ba1825e56e56aded13942a215ee2de857acd4aa21d29f3e2b0abf9ba34a718c4786e309869cb1afb044236d2b2db5f2fe6a9c33e1a3073f76faa8e75dcea7cb1dbdedfdc628b4e0db4b01abb0cd89efb0a0592c0ca50ab71b0bbc41c21a5934fdb95a20fd31486c578c30dab68df0b2495b16c7c2e05ad450dc78cfeb0a729ab7296cc2cbb3cf0001ace148415392a9b679ad1d6c0dc4e0dc9ffb559cc15cf49768d513b28cff69f006bb6412e", 0xf2, 0x6}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='totmaps\x00') ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000080)={0x5, r7}) [ 1111.084991][T24017] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 1111.117113][T24017] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:43 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = dup3(r0, r2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000340)={0x38, 0x8, r4, 0x0, 0x3, 0x33a608, 0x5b, &(0x7f00000002c0)="eb60b134b41b59954a0897b61575f2ae6c0b8d1ac993b6fea93a39a100c9f6a85ae983ffd4757b572ad66ebc85d6f72c6100d33f14a442684d95a9473799b804d9a3919573a64fad5edbfc0132754947e76b55c740b8ae6b4f6572"}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r6, &(0x7f0000000240)) fcntl$setlease(r2, 0x400, 0x2) flock(r2, 0x4) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:43 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper, 0x1}, 0x0, 0x0, 0x5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1111.151846][T24017] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1111.197042][T24017] CPU: 1 PID: 24017 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1111.207559][T24017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1111.217670][T24017] Call Trace: [ 1111.220997][T24017] [ 1111.223978][T24017] dump_stack_lvl+0x125/0x1b0 [ 1111.228722][T24017] sysfs_warn_dup+0x7f/0xa0 [ 1111.233297][T24017] sysfs_create_dir_ns+0x247/0x2a0 [ 1111.238487][T24017] ? sysfs_create_mount_point+0xb0/0xb0 [ 1111.244103][T24017] ? spin_bug+0x1d0/0x1d0 [ 1111.248509][T24017] ? do_raw_spin_unlock+0x173/0x230 [ 1111.253789][T24017] kobject_add_internal+0x2c8/0x960 [ 1111.259063][T24017] kobject_add+0x16f/0x240 [ 1111.263551][T24017] ? kset_create_and_add+0x190/0x190 [ 1111.268906][T24017] ? kobject_put+0xbe/0x440 [ 1111.273475][T24017] ? bus_get_dev_root+0x5e/0x80 [ 1111.278402][T24017] device_add+0x289/0x1aa0 [ 1111.282881][T24017] ? device_initialize+0x510/0x510 [ 1111.288062][T24017] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1111.294984][T24017] ? __init_waitqueue_head+0xca/0x150 [ 1111.300451][T24017] iommufd_test+0x1c47/0x2e60 [ 1111.305201][T24017] ? reacquire_held_locks+0x4b0/0x4b0 [ 1111.310733][T24017] ? iommufd_selftest_destroy+0x100/0x100 [ 1111.316497][T24017] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1111.321570][T24017] iommufd_fops_ioctl+0x347/0x4d0 [ 1111.326639][T24017] ? iommufd_destroy+0x180/0x180 [ 1111.331630][T24017] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1111.336630][T24017] ? iommufd_destroy+0x180/0x180 [ 1111.341609][T24017] __x64_sys_ioctl+0x18f/0x210 [ 1111.346417][T24017] do_syscall_64+0x38/0xb0 [ 1111.350871][T24017] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1111.356803][T24017] RIP: 0033:0x7f69ab27cae9 [ 1111.361250][T24017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1111.380905][T24017] RSP: 002b:00007f69abf080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.389447][T24017] RAX: ffffffffffffffda RBX: 00007f69ab39c050 RCX: 00007f69ab27cae9 [ 1111.397539][T24017] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1111.405543][T24017] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1111.413558][T24017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.421563][T24017] R13: 000000000000000b R14: 00007f69ab39c050 R15: 00007f69ab4bfa48 [ 1111.429585][T24017] [ 1111.439910][T17197] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1111.472125][T24017] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. [ 1111.497846][T24028] iommufd_mock iommufd_mock4: Adding to iommu group 2 13:28:44 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper, 0x1}, 0x0, 0x0, 0x5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:44 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async) r4 = dup3(r0, r2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000340)={0x38, 0x8, r4, 0x0, 0x3, 0x33a608, 0x5b, &(0x7f00000002c0)="eb60b134b41b59954a0897b61575f2ae6c0b8d1ac993b6fea93a39a100c9f6a85ae983ffd4757b572ad66ebc85d6f72c6100d33f14a442684d95a9473799b804d9a3919573a64fad5edbfc0132754947e76b55c740b8ae6b4f6572"}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r6, &(0x7f0000000240)) (async) fcntl$setlease(r2, 0x400, 0x2) (async) flock(r2, 0x4) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1111.546230][T24035] iommufd_mock iommufd_mock5: Adding to iommu group 2 [ 1111.592931][T24017] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1111.633753][T24017] CPU: 1 PID: 24017 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1111.644270][T24017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1111.654557][T24017] Call Trace: [ 1111.657920][T24017] [ 1111.660899][T24017] dump_stack_lvl+0x125/0x1b0 [ 1111.665669][T24017] sysfs_warn_dup+0x7f/0xa0 [ 1111.670425][T24017] sysfs_create_dir_ns+0x247/0x2a0 [ 1111.675621][T24017] ? sysfs_create_mount_point+0xb0/0xb0 [ 1111.681331][T24017] ? spin_bug+0x1d0/0x1d0 [ 1111.685834][T24017] ? do_raw_spin_unlock+0x173/0x230 [ 1111.691161][T24017] kobject_add_internal+0x2c8/0x960 [ 1111.696447][T24017] kobject_add+0x16f/0x240 [ 1111.699426][T17197] usb 5-1: device descriptor read/64, error -71 [ 1111.700910][T24017] ? kset_create_and_add+0x190/0x190 [ 1111.700960][T24017] ? kobject_put+0xbe/0x440 [ 1111.717464][T24017] ? bus_get_dev_root+0x5e/0x80 [ 1111.722412][T24017] device_add+0x289/0x1aa0 [ 1111.726907][T24017] ? device_initialize+0x510/0x510 [ 1111.732112][T24017] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1111.732147][T24040] iommufd_mock iommufd_mock4: Adding to iommu group 2 [ 1111.739094][T24017] ? __init_waitqueue_head+0xca/0x150 [ 1111.739151][T24017] iommufd_test+0x1c47/0x2e60 [ 1111.756207][T24017] ? reacquire_held_locks+0x4b0/0x4b0 [ 1111.761645][T24017] ? iommufd_selftest_destroy+0x100/0x100 [ 1111.767407][T24017] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1111.772484][T24017] iommufd_fops_ioctl+0x347/0x4d0 [ 1111.777731][T24017] ? iommufd_destroy+0x180/0x180 [ 1111.782725][T24017] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1111.787759][T24017] ? iommufd_destroy+0x180/0x180 [ 1111.792742][T24017] __x64_sys_ioctl+0x18f/0x210 [ 1111.797553][T24017] do_syscall_64+0x38/0xb0 [ 1111.802029][T24017] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1111.808020][T24017] RIP: 0033:0x7f69ab27cae9 [ 1111.812469][T24017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1111.832121][T24017] RSP: 002b:00007f69abf080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.840747][T24017] RAX: ffffffffffffffda RBX: 00007f69ab39c050 RCX: 00007f69ab27cae9 [ 1111.848752][T24017] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1111.856930][T24017] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1111.864977][T24017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.873243][T24017] R13: 000000000000000b R14: 00007f69ab39c050 R15: 00007f69ab4bfa48 [ 1111.881357][T24017] [ 1111.938809][T24017] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. [ 1112.073456][T17197] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1112.283726][T17197] usb 5-1: device descriptor read/64, error -71 [ 1112.403797][T17197] usb usb5-port1: attempt power cycle [ 1112.823460][T17197] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1112.913596][T17197] usb 5-1: device descriptor read/8, error -71 [ 1113.203493][T17197] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1113.303629][T17197] usb 5-1: device descriptor read/8, error -71 [ 1113.435612][T17197] usb usb5-port1: unable to enumerate USB device 13:28:46 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x6d48, 0x8, 0x7, 0x10000, 0xfffffffffffeffff, 0x4}, &(0x7f0000000140)={0x81, 0xffffffffffffffc0, 0x5, 0x2a, 0xfc9, 0x9, 0x6, 0x7b02}, &(0x7f0000000180)={0x1000, 0x4b, 0x4, 0xe0000000000, 0x7, 0x8, 0x81, 0x1}, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6]}, 0x8}) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000002c0)={0x1, {{0xa, 0x4e21, 0x8, @loopback, 0x3}}, {{0xa, 0x4e21, 0xa9, @loopback, 0x8}}}, 0x108) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper, 0x1}, 0x0, 0x0, 0x5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper, 0x1}, 0x0, 0x0, 0x5}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) 13:28:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7e}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:46 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000540)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x5, r3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r3, 0x0, &(0x7f0000000200)="c960cf22183b92d776fd2678dc82744cd8b0ab9ca493174c6b41ef21cb13e62669f065226eb43ec7f109dfbdc552ac5cb8f7a972c9c1e404b3f91c15cc4620dffd0291b940ba1825e56e56aded13942a215ee2de857acd4aa21d29f3e2b0abf9ba34a718c4786e309869cb1afb044236d2b2db5f2fe6a9c33e1a3073f76faa8e75dcea7cb1dbdedfdc628b4e0db4b01abb0cd89efb0a0592c0ca50ab71b0bbc41c21a5934fdb95a20fd31486c578c30dab68df0b2495b16c7c2e05ad450dc78cfeb0a729ab7296cc2cbb3cf0001ace148415392a9b679ad1d6c0dc4e0dc9ffb559cc15cf49768d513b28cff69f006bb6412e", 0xf2, 0x6}) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='totmaps\x00') ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000080)={0x5, r7}) 13:28:46 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = dup3(r0, r2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000340)={0x38, 0x8, r4, 0x0, 0x3, 0x33a608, 0x5b, &(0x7f00000002c0)="eb60b134b41b59954a0897b61575f2ae6c0b8d1ac993b6fea93a39a100c9f6a85ae983ffd4757b572ad66ebc85d6f72c6100d33f14a442684d95a9473799b804d9a3919573a64fad5edbfc0132754947e76b55c740b8ae6b4f6572"}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r6, &(0x7f0000000240)) fcntl$setlease(r2, 0x400, 0x2) flock(r2, 0x4) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async) dup3(r0, r2, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000340)={0x38, 0x8, r4, 0x0, 0x3, 0x33a608, 0x5b, &(0x7f00000002c0)="eb60b134b41b59954a0897b61575f2ae6c0b8d1ac993b6fea93a39a100c9f6a85ae983ffd4757b572ad66ebc85d6f72c6100d33f14a442684d95a9473799b804d9a3919573a64fad5edbfc0132754947e76b55c740b8ae6b4f6572"}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r5, 0x0, 0xffffffffffffffff}) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) (async) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r6, &(0x7f0000000240)) (async) fcntl$setlease(r2, 0x400, 0x2) (async) flock(r2, 0x4) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) 13:28:46 executing program 5: clock_getres(0x4, &(0x7f0000000080)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f00000000c0)={0x8, r4}) [ 1114.115318][T24051] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1114.139765][T24053] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb, 0x8880}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x5c}}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x8880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', r4, 0x20, 0x80, 0x6, 0x9, {{0xc, 0x4, 0x0, 0x15, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xb2, [@empty, @multicast2, @multicast2, @remote, @rand_addr=0x64010102, @multicast2]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0xbf, 0x46, 0x4, 0x401}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) write$P9_RSTATu(r1, &(0x7f0000000040)={0x5b, 0x7d, 0x1, {{0x0, 0x43, 0x5, 0x9, {0x10, 0x3, 0x1}, 0x41010000, 0x9, 0xfffffffd, 0xbe65, 0x0, '', 0x1, '[', 0xf, '/proc/slabinfo\x00'}, 0x3, '{:(', 0xee01, r7}}, 0x5b) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1114.176169][T24058] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1114.223257][T24058] CPU: 0 PID: 24058 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1114.233765][T24058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1114.243940][T24058] Call Trace: [ 1114.247441][T24058] [ 1114.250465][T24058] dump_stack_lvl+0x125/0x1b0 [ 1114.255428][T24058] sysfs_warn_dup+0x7f/0xa0 [ 1114.259997][T24058] sysfs_create_dir_ns+0x247/0x2a0 [ 1114.265174][T24058] ? sysfs_create_mount_point+0xb0/0xb0 [ 1114.270818][T24058] ? spin_bug+0x1d0/0x1d0 [ 1114.275215][T24058] ? do_raw_spin_unlock+0x173/0x230 [ 1114.280477][T24058] kobject_add_internal+0x2c8/0x960 [ 1114.285734][T24058] kobject_add+0x16f/0x240 [ 1114.290248][T24058] ? kset_create_and_add+0x190/0x190 [ 1114.295582][T24058] ? kobject_put+0xbe/0x440 [ 1114.300191][T24058] ? bus_get_dev_root+0x5e/0x80 [ 1114.305088][T24058] device_add+0x289/0x1aa0 [ 1114.309551][T24058] ? device_initialize+0x510/0x510 [ 1114.314711][T24058] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1114.321623][T24058] ? __init_waitqueue_head+0xca/0x150 [ 1114.327097][T24058] iommufd_test+0x1c47/0x2e60 [ 1114.331827][T24058] ? reacquire_held_locks+0x4b0/0x4b0 [ 1114.337258][T24058] ? iommufd_selftest_destroy+0x100/0x100 [ 1114.343019][T24058] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1114.348134][T24058] iommufd_fops_ioctl+0x347/0x4d0 [ 1114.353200][T24058] ? iommufd_destroy+0x180/0x180 [ 1114.358199][T24058] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1114.363181][T24058] ? iommufd_destroy+0x180/0x180 [ 1114.368338][T24058] __x64_sys_ioctl+0x18f/0x210 [ 1114.373244][T24058] do_syscall_64+0x38/0xb0 [ 1114.377720][T24058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1114.383681][T24058] RIP: 0033:0x7f798a67cae9 [ 1114.388144][T24058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1114.407939][T24058] RSP: 002b:00007f798b3450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.416838][T24058] RAX: ffffffffffffffda RBX: 00007f798a79bf80 RCX: 00007f798a67cae9 [ 1114.424841][T24058] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1114.433061][T24058] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1114.441070][T24058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.449208][T24058] R13: 000000000000000b R14: 00007f798a79bf80 R15: 00007f798a8bfa48 [ 1114.457461][T24058] [ 1114.486417][T24058] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:47 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff, 0x400}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:47 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0x2, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8}) 13:28:47 executing program 5: clock_getres(0x4, &(0x7f0000000080)) (async) clock_getres(0x4, &(0x7f0000000080)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f00000000c0)={0x8, r4}) [ 1114.613402][ T5142] usb 5-1: new high-speed USB device number 68 using dummy_hcd 13:28:47 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb, 0x8880}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb, 0x8880}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x5c}}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x8880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', r4, 0x20, 0x80, 0x6, 0x9, {{0xc, 0x4, 0x0, 0x15, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xb2, [@empty, @multicast2, @multicast2, @remote, @rand_addr=0x64010102, @multicast2]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0xbf, 0x46, 0x4, 0x401}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0xbf, 0x46, 0x4, 0x401}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) write$P9_RSTATu(r1, &(0x7f0000000040)={0x5b, 0x7d, 0x1, {{0x0, 0x43, 0x5, 0x9, {0x10, 0x3, 0x1}, 0x41010000, 0x9, 0xfffffffd, 0xbe65, 0x0, '', 0x1, '[', 0xf, '/proc/slabinfo\x00'}, 0x3, '{:(', 0xee01, r7}}, 0x5b) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1114.699768][T24068] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:47 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff, 0x400}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1114.804238][ T5142] usb 5-1: device descriptor read/64, error -71 [ 1114.820502][T24071] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1114.908602][T24080] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1115.093699][ T5142] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1115.283454][ T5142] usb 5-1: device descriptor read/64, error -71 [ 1115.403741][ T5142] usb usb5-port1: attempt power cycle [ 1115.819570][ T5142] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1115.919369][ T5142] usb 5-1: device descriptor read/8, error -71 [ 1116.193468][ T5142] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1116.283642][ T5142] usb 5-1: device descriptor read/8, error -71 [ 1116.411296][ T5142] usb usb5-port1: unable to enumerate USB device 13:28:49 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x6d48, 0x8, 0x7, 0x10000, 0xfffffffffffeffff, 0x4}, &(0x7f0000000140)={0x81, 0xffffffffffffffc0, 0x5, 0x2a, 0xfc9, 0x9, 0x6, 0x7b02}, &(0x7f0000000180)={0x1000, 0x4b, 0x4, 0xe0000000000, 0x7, 0x8, 0x81, 0x1}, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6]}, 0x8}) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000002c0)={0x1, {{0xa, 0x4e21, 0x8, @loopback, 0x3}}, {{0xa, 0x4e21, 0xa9, @loopback, 0x8}}}, 0x108) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r5, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) (async) r1 = dup2(r0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb, 0x8880}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x5c}}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x8880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', r4, 0x20, 0x80, 0x6, 0x9, {{0xc, 0x4, 0x0, 0x15, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xb2, [@empty, @multicast2, @multicast2, @remote, @rand_addr=0x64010102, @multicast2]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', r4, 0x20, 0x80, 0x6, 0x9, {{0xc, 0x4, 0x0, 0x15, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xb2, [@empty, @multicast2, @multicast2, @remote, @rand_addr=0x64010102, @multicast2]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0xbf, 0x46, 0x4, 0x401}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0xbf, 0x46, 0x4, 0x401}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) write$P9_RSTATu(r1, &(0x7f0000000040)={0x5b, 0x7d, 0x1, {{0x0, 0x43, 0x5, 0x9, {0x10, 0x3, 0x1}, 0x41010000, 0x9, 0xfffffffd, 0xbe65, 0x0, '', 0x1, '[', 0xf, '/proc/slabinfo\x00'}, 0x3, '{:(', 0xee01, r7}}, 0x5b) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:49 executing program 5: clock_getres(0x4, &(0x7f0000000080)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f00000000c0)={0x8, r4}) 13:28:49 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0x2, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0x2, 0x9}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8}) (async) 13:28:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1f4}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:49 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff, 0x400}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1117.191103][T24083] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:50 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x38, 0x1, r3, 0x0, 0x2, 0x9}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8}) [ 1117.265014][T24093] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/255}) preadv(r0, &(0x7f0000002140), 0x0, 0x4, 0x0) 13:28:50 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="92f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7093234f720cb687362d7c60d606742655576955224acbfdb2b27794c66b0378cb9d7d21b87b0f0142c175e2b88a91970705bb1ed16c315b2a34e354819738e0f42ee15550294bc6ffd087a08751f4c8327882788fbd856126350"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000180)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200241, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x1, r1, 0x0, 0x7f6e, 0xffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:50 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x6d48, 0x8, 0x7, 0x10000, 0xfffffffffffeffff, 0x4}, &(0x7f0000000140)={0x81, 0xffffffffffffffc0, 0x5, 0x2a, 0xfc9, 0x9, 0x6, 0x7b02}, &(0x7f0000000180)={0x1000, 0x4b, 0x4, 0xe0000000000, 0x7, 0x8, 0x81, 0x1}, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6]}, 0x8}) (async) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000002c0)={0x1, {{0xa, 0x4e21, 0x8, @loopback, 0x3}}, {{0xa, 0x4e21, 0xa9, @loopback, 0x8}}}, 0x108) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r5, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:50 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8000000000000001, 0x4000) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x1, 0xe1}, {0xffff, 0x8000000000000001}, {0xff, 0xe6}]}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r5, 0x8, r6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000240)=0x2, 0x8) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/255}) (async) preadv(r0, &(0x7f0000002140), 0x0, 0x4, 0x0) 13:28:50 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x2, "2c9b09ba75de77ee145aa6ebc55e87"}, 0x10, 0x1) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1117.579346][T24104] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1117.608307][T24115] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:50 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020020000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0xb0, {0xb0, 0x24, "86ac9b6a4678f7e5fe209078612d2c51e85f3329f7c250fd7ae5cbc51890e1d3f07f7f2dadb059dca78a9a1801b74f6f66fbfaa02631cafb322bd20ec4dcc7314540c51c70eaa0163f44fe477fba0ee14956cb7f49806a5ff4fed7281b8fdf7ef0a200c95175fff48e1118e6f52a2cf6d62c33c4f0428ffcf7b5731abc07c11d5327e59ffdeb2a228d37ff39d14cb80e932d3d843300bff1f60ee5e5a37e779c2095a9292d3d7cf52ee53caca030"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000200)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0xbe, 0x0, 0xffff, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2d, 0xfd, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f2bfcb3d160e12518f7e0f30e4d12742"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7d, 0x40, 0x5, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9d, 0x2, 0x1, 0x7f, "8c4ae42c", "8e863e38"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4783fa14dc199c7d, 0x3, 0x5, 0x81, 0x9, 0x88f}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x15, 0x79, "02ad0765e11b464ac09523cd0c04d604adc3da86007ddfbd3f7062e5a320b7e165ff5c87793a0860994244a92528f04deca7988105394633952a3bf103b7994674e2df97ab439ffd661aa09d5b08c7f9bea6a42ae993e42567c93f37e1857a5804894e698dcfcfb43e15b9e1b6107cbf0e71dbfe0aa7fdba86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xd75}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "056d"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "068e"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r1, &(0x7f0000000a40)={0x24, &(0x7f00000008c0)={0x0, 0xe, 0xba, {0xba, 0x11, "eca8b0e60200063c7972f02252e8fd00ddb7767808c9f4edfee03338f0df2211f1da63922974c1a4c3021f8447fd9acb20bab9b0236a374cc4f45b5fa15697401833e7a9ef7a664de136a99aec2e70608b006725c7a7dbd570da940ac5ffa6be836dc883fa06b324e134dc2a226431dd755d6d7465b87a17f5805d4f72724e2bda354f8adf3db93c049fc13bb7472e3766af2371bc18c02fd669a0dbedc4feea7cce215f095d3e781aa6835d62af08fd129548d21e67b2ca"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f00000009c0)={0x0, 0x22, 0x1f, {[@global=@item_4={0x3, 0x1, 0xa, "dc8346c9"}, @local=@item_012={0x2, 0x2, 0xa, "0cfb"}, @global=@item_4={0x3, 0x1, 0x2, "16146598"}, @global=@item_4={0x3, 0x1, 0x2, "e148f5ab"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x1, 0x0, 0xc, 'o'}, @local=@item_4={0x3, 0x2, 0x7, "6b9e9f09"}, @local=@item_4={0x3, 0x2, 0x5, "4b26cd68"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x7, 0x1, {0x22, 0xf20}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x20, 0x7, 0x77, "83129c33b17ab4ca39bfa8b200b18c070f6f4f717f083900d11631b3697090e19d9cc2db0a680ae9eaaa88ddd6bcb05010bf3be2517acc5afeb377ff6734590adfa3a2405a018e2b471e7a747df99757d20c9170845b787b2d2a61d485a5fa81ebdd597358b3da0a028ca30e6d14e37aea2a188a1a2a2a"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b80)={0x20, 0x1, 0xe7, "76ce4c776b3b18ce2f570e200aa60f763559ded66c8ba512e62a448399dcecb51bcc530493ddcd5f58021ad17e059d2bdf0cdd7f4a1d344ba4f29750761c3e674130a5cb15483ea14c4851ce64cc263add580d828e4d67632a1b5f6bce3a9b94efb167e33ace7028b7fc667a855c94abdb3e41795841893f53fc18ac8e0472187d9bb0282cd731db4475502eec7885fb7564a7a69f1194fe0834d5405e5bf821650a3a070e90a4a48cc278de9d7a7a518371d4ded7a868110eac907321b11546e3a3411ba377791eeb7b57a4abc45cf90b24f96393e26fd0dc9beeef1325c5572e4bf2e17a0c98"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x7}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:50 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="92f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7093234f720cb687362d7c60d606742655576955224acbfdb2b27794c66b0378cb9d7d21b87b0f0142c175e2b88a91970705bb1ed16c315b2a34e354819738e0f42ee15550294bc6ffd087a08751f4c8327882788fbd856126350"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) (async, rerun: 64) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200241, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x1, r1, 0x0, 0x7f6e, 0xffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/255}) preadv(r0, &(0x7f0000002140), 0x0, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/255}) (async) preadv(r0, &(0x7f0000002140), 0x0, 0x4, 0x0) (async) [ 1117.804946][T24123] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3e8}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x3, 0x1, 0x223, 0x3d6, 0x0, 0x2b5}, "", ['\x00', '\x00', '\x00']}, 0x320) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) flistxattr(r0, &(0x7f0000000400)=""/247, 0xf7) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x2005) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000003c0)={0xffffff80, 0x8}) 13:28:50 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x2, "2c9b09ba75de77ee145aa6ebc55e87"}, 0x10, 0x1) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x2, "2c9b09ba75de77ee145aa6ebc55e87"}, 0x10, 0x1) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) 13:28:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x3, 0x1, 0x223, 0x3d6, 0x0, 0x2b5}, "", ['\x00', '\x00', '\x00']}, 0x320) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) flistxattr(r0, &(0x7f0000000400)=""/247, 0xf7) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) sendfile(r1, r0, 0x0, 0x2005) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000003c0)={0xffffff80, 0x8}) [ 1118.109439][T24137] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1118.165509][T24137] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:28:51 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="92f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7093234f720cb687362d7c60d606742655576955224acbfdb2b27794c66b0378cb9d7d21b87b0f0142c175e2b88a91970705bb1ed16c315b2a34e354819738e0f42ee15550294bc6ffd087a08751f4c8327882788fbd856126350"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000180)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200241, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x1, r1, 0x0, 0x7f6e, 0xffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:28:51 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x2, "2c9b09ba75de77ee145aa6ebc55e87"}, 0x10, 0x1) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1118.273602][ T5142] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1118.389246][T24151] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1118.446943][T24149] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1118.553422][ T5142] usb 5-1: Using ep0 maxpacket: 8 [ 1118.684061][ T5142] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1118.731514][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1118.753427][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.773405][ T5142] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 13:28:51 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8000000000000001, 0x4000) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x1, 0xe1}, {0xffff, 0x8000000000000001}, {0xff, 0xe6}]}) (async, rerun: 64) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r5, 0x8, r6) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000240)=0x2, 0x8) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x3, 0x1, 0x223, 0x3d6, 0x0, 0x2b5}, "", ['\x00', '\x00', '\x00']}, 0x320) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) flistxattr(r0, &(0x7f0000000400)=""/247, 0xf7) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64) sendfile(r1, r0, 0x0, 0x2005) (async, rerun: 64) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000003c0)={0xffffff80, 0x8}) 13:28:51 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000240)={0x28, 0x7, r9, r10, 0xfff, 0xa6d, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x55, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000300)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000540)={0xc}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x8b00, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r11, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) [ 1118.802688][ T5142] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.833405][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.912143][T24158] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1118.938327][T24157] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1119.124385][ T5142] usb 5-1: usb_control_msg returned -32 [ 1119.163569][ T5142] usbtmc 5-1:16.0: can't read capabilities [ 1120.043394][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.052729][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.061863][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.070975][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.080112][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.089399][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.099775][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.108935][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.118788][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.128136][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.137323][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.146460][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.156148][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.165299][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.174427][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1120.183552][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:28:54 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020020000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0xb0, {0xb0, 0x24, "86ac9b6a4678f7e5fe209078612d2c51e85f3329f7c250fd7ae5cbc51890e1d3f07f7f2dadb059dca78a9a1801b74f6f66fbfaa02631cafb322bd20ec4dcc7314540c51c70eaa0163f44fe477fba0ee14956cb7f49806a5ff4fed7281b8fdf7ef0a200c95175fff48e1118e6f52a2cf6d62c33c4f0428ffcf7b5731abc07c11d5327e59ffdeb2a228d37ff39d14cb80e932d3d843300bff1f60ee5e5a37e779c2095a9292d3d7cf52ee53caca030"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000200)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0xbe, 0x0, 0xffff, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2d, 0xfd, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f2bfcb3d160e12518f7e0f30e4d12742"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7d, 0x40, 0x5, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9d, 0x2, 0x1, 0x7f, "8c4ae42c", "8e863e38"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4783fa14dc199c7d, 0x3, 0x5, 0x81, 0x9, 0x88f}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x15, 0x79, "02ad0765e11b464ac09523cd0c04d604adc3da86007ddfbd3f7062e5a320b7e165ff5c87793a0860994244a92528f04deca7988105394633952a3bf103b7994674e2df97ab439ffd661aa09d5b08c7f9bea6a42ae993e42567c93f37e1857a5804894e698dcfcfb43e15b9e1b6107cbf0e71dbfe0aa7fdba86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xd75}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "056d"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "068e"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r1, &(0x7f0000000a40)={0x24, &(0x7f00000008c0)={0x0, 0xe, 0xba, {0xba, 0x11, "eca8b0e60200063c7972f02252e8fd00ddb7767808c9f4edfee03338f0df2211f1da63922974c1a4c3021f8447fd9acb20bab9b0236a374cc4f45b5fa15697401833e7a9ef7a664de136a99aec2e70608b006725c7a7dbd570da940ac5ffa6be836dc883fa06b324e134dc2a226431dd755d6d7465b87a17f5805d4f72724e2bda354f8adf3db93c049fc13bb7472e3766af2371bc18c02fd669a0dbedc4feea7cce215f095d3e781aa6835d62af08fd129548d21e67b2ca"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f00000009c0)={0x0, 0x22, 0x1f, {[@global=@item_4={0x3, 0x1, 0xa, "dc8346c9"}, @local=@item_012={0x2, 0x2, 0xa, "0cfb"}, @global=@item_4={0x3, 0x1, 0x2, "16146598"}, @global=@item_4={0x3, 0x1, 0x2, "e148f5ab"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x1, 0x0, 0xc, 'o'}, @local=@item_4={0x3, 0x2, 0x7, "6b9e9f09"}, @local=@item_4={0x3, 0x2, 0x5, "4b26cd68"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x7, 0x1, {0x22, 0xf20}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x20, 0x7, 0x77, "83129c33b17ab4ca39bfa8b200b18c070f6f4f717f083900d11631b3697090e19d9cc2db0a680ae9eaaa88ddd6bcb05010bf3be2517acc5afeb377ff6734590adfa3a2405a018e2b471e7a747df99757d20c9170845b787b2d2a61d485a5fa81ebdd597358b3da0a028ca30e6d14e37aea2a188a1a2a2a"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b80)={0x20, 0x1, 0xe7, "76ce4c776b3b18ce2f570e200aa60f763559ded66c8ba512e62a448399dcecb51bcc530493ddcd5f58021ad17e059d2bdf0cdd7f4a1d344ba4f29750761c3e674130a5cb15483ea14c4851ce64cc263add580d828e4d67632a1b5f6bce3a9b94efb167e33ace7028b7fc667a855c94abdb3e41795841893f53fc18ac8e0472187d9bb0282cd731db4475502eec7885fb7564a7a69f1194fe0834d5405e5bf821650a3a070e90a4a48cc278de9d7a7a518371d4ded7a868110eac907321b11546e3a3411ba377791eeb7b57a4abc45cf90b24f96393e26fd0dc9beeef1325c5572e4bf2e17a0c98"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x7}}) (async, rerun: 64) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:54 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000240)={0x28, 0x7, r9, r10, 0xfff, 0xa6d, 0x4}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x55, 0x2, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000300)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000540)={0xc}) (async) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x8b00, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r11, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14, 0x1}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) 13:28:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x500}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) sendfile(r1, r1, &(0x7f0000000080)=0x4, 0xf1d2) 13:28:54 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r9, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r9}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000380)={0x8, r10}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r10}) 13:28:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8000000000000001, 0x4000) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x1, 0xe1}, {0xffff, 0x8000000000000001}, {0xff, 0xe6}]}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r5, 0x8, r6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000240)=0x2, 0x8) (async, rerun: 32) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (rerun: 32) [ 1121.258737][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.265281][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.286115][T17182] usb 5-1: USB disconnect, device number 72 [ 1121.331440][T24168] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1121.425633][T24176] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1121.462530][T24176] iommufd_mock iommufd_mock3: Adding to iommu group 2 13:28:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) sendfile(r1, r1, &(0x7f0000000080)=0x4, 0xf1d2) [ 1121.490547][T24176] iommufd_mock iommufd_mock4: Adding to iommu group 3 [ 1121.521365][T24176] sysfs: cannot create duplicate filename '/devices/iommufd_mock4' [ 1121.536240][T24176] CPU: 0 PID: 24176 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1121.544535][T24172] iommufd_mock iommufd_mock5: Adding to iommu group 0 [ 1121.546722][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1121.563615][T24176] Call Trace: [ 1121.567183][T24176] [ 1121.570155][T24176] dump_stack_lvl+0x125/0x1b0 [ 1121.574978][T24176] sysfs_warn_dup+0x7f/0xa0 [ 1121.579553][T24176] sysfs_create_dir_ns+0x247/0x2a0 [ 1121.584750][T24176] ? sysfs_create_mount_point+0xb0/0xb0 [ 1121.590368][T24176] ? spin_bug+0x1d0/0x1d0 [ 1121.594787][T24176] ? do_raw_spin_unlock+0x173/0x230 [ 1121.600123][T24172] iommufd_mock iommufd_mock5: Adding to iommu group 0 [ 1121.606936][T24176] kobject_add_internal+0x2c8/0x960 [ 1121.612216][T24176] kobject_add+0x16f/0x240 [ 1121.616701][T24176] ? kset_create_and_add+0x190/0x190 [ 1121.622052][T24176] ? kobject_put+0xbe/0x440 [ 1121.626628][T24176] ? bus_get_dev_root+0x5e/0x80 [ 1121.631546][T24176] device_add+0x289/0x1aa0 [ 1121.636457][T24176] ? device_initialize+0x510/0x510 [ 1121.641639][T24176] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1121.648560][T24176] ? __init_waitqueue_head+0xca/0x150 [ 1121.654533][T24176] iommufd_test+0x1c47/0x2e60 [ 1121.659390][T24176] ? reacquire_held_locks+0x4b0/0x4b0 [ 1121.664845][T24176] ? iommufd_selftest_destroy+0x100/0x100 [ 1121.670648][T24176] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1121.675751][T24176] iommufd_fops_ioctl+0x347/0x4d0 [ 1121.680847][T24176] ? iommufd_destroy+0x180/0x180 [ 1121.685865][T24176] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1121.690867][T24176] ? iommufd_destroy+0x180/0x180 [ 1121.695902][T24176] __x64_sys_ioctl+0x18f/0x210 [ 1121.700730][T24176] do_syscall_64+0x38/0xb0 [ 1121.705210][T24176] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.711340][T24176] RIP: 0033:0x7f798a67cae9 [ 1121.715806][T24176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1121.735659][T24176] RSP: 002b:00007f798b3240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.744135][T24176] RAX: ffffffffffffffda RBX: 00007f798a79c050 RCX: 00007f798a67cae9 [ 1121.752167][T24176] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1121.760194][T24176] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1121.768256][T24176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.776376][T24176] R13: 000000000000000b R14: 00007f798a79c050 R15: 00007f798a8bfa48 [ 1121.784685][T24176] [ 1121.812286][T24176] kobject: kobject_add_internal failed for iommufd_mock4 with -EEXIST, don't try to register things with the same name in the same directory. [ 1121.827458][T24176] sysfs: cannot create duplicate filename '/devices/iommufd_mock4' [ 1121.830189][T17182] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1121.835429][T24176] CPU: 0 PID: 24176 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1121.835471][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1121.835490][T24176] Call Trace: [ 1121.835503][T24176] [ 1121.835517][T24176] dump_stack_lvl+0x125/0x1b0 [ 1121.835558][T24176] sysfs_warn_dup+0x7f/0xa0 [ 1121.880929][T24176] sysfs_create_dir_ns+0x247/0x2a0 [ 1121.886116][T24176] ? sysfs_create_mount_point+0xb0/0xb0 [ 1121.891758][T24176] ? spin_bug+0x1d0/0x1d0 [ 1121.896363][T24176] ? do_raw_spin_unlock+0x173/0x230 [ 1121.901652][T24176] kobject_add_internal+0x2c8/0x960 [ 1121.906931][T24176] kobject_add+0x16f/0x240 [ 1121.911425][T24176] ? kset_create_and_add+0x190/0x190 [ 1121.916784][T24176] ? kobject_put+0xbe/0x440 [ 1121.921375][T24176] ? bus_get_dev_root+0x5e/0x80 [ 1121.926305][T24176] device_add+0x289/0x1aa0 [ 1121.930796][T24176] ? device_initialize+0x510/0x510 [ 1121.935992][T24176] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1121.942916][T24176] ? __init_waitqueue_head+0xca/0x150 [ 1121.948376][T24176] iommufd_test+0x1c47/0x2e60 [ 1121.953131][T24176] ? reacquire_held_locks+0x4b0/0x4b0 [ 1121.958584][T24176] ? iommufd_selftest_destroy+0x100/0x100 [ 1121.964377][T24176] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1121.969479][T24176] iommufd_fops_ioctl+0x347/0x4d0 [ 1121.974606][T24176] ? iommufd_destroy+0x180/0x180 [ 1121.980528][T24176] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1121.985550][T24176] ? iommufd_destroy+0x180/0x180 [ 1121.990571][T24176] __x64_sys_ioctl+0x18f/0x210 [ 1121.995425][T24176] do_syscall_64+0x38/0xb0 [ 1121.999918][T24176] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1122.005882][T24176] RIP: 0033:0x7f798a67cae9 [ 1122.010355][T24176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1122.030024][T24176] RSP: 002b:00007f798b3240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.038504][T24176] RAX: ffffffffffffffda RBX: 00007f798a79c050 RCX: 00007f798a67cae9 [ 1122.046617][T24176] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1122.054661][T24176] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 13:28:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) sendfile(r1, r1, &(0x7f0000000080)=0x4, 0xf1d2) 13:28:54 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) (async, rerun: 64) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x0, 0xfffffffffffffffd}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r9, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r9}) (async, rerun: 32) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000380)={0x8, r10}) (rerun: 32) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r10}) [ 1122.062689][T24176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.070723][T24176] R13: 000000000000000b R14: 00007f798a79c050 R15: 00007f798a8bfa48 [ 1122.079420][T24176] 13:28:54 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x0, 0xfffffffffffffffd}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r9, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000340)={0x38, 0x2, r9, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000080)={0x38, 0x1, r9}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f0000000380)={0x8, r10}) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000000c0)={0x8, r10}) 13:28:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='-\x00', &(0x7f00000000c0)="67443e4721e043d444d2aceaf0429408d1fdce6fd4fbc3ef376eb7bcad2148291063235fb2e79d74596be53f9318cdc2207cc859877fe8da6a001e03893e446ed91ccb3491a95ff96880a4a4f5fb3ab0970b135d936792fba23fe5cf69bb7cb05ac012d5bf0882bf3418074d4ca3cd93a7a5622131", 0x75) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) [ 1122.198613][T24176] kobject: kobject_add_internal failed for iommufd_mock4 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1122.303521][T17182] usb 5-1: Using ep0 maxpacket: 8 [ 1122.317578][T24200] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1122.370877][T24200] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1122.443602][T17182] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1122.463107][T17182] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1122.492193][T17182] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.514766][T17182] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.557983][T17182] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1122.582142][T17182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.863691][T17182] usb 5-1: usb_control_msg returned -32 [ 1122.869361][T17182] usbtmc 5-1:16.0: can't read capabilities [ 1123.093533][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.102696][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.111796][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.120892][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.130014][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.139226][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.148348][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.157575][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.166830][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.176063][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.185161][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.194254][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.203394][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.212694][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.221838][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1123.230942][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:28:56 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020020000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0xb0, {0xb0, 0x24, "86ac9b6a4678f7e5fe209078612d2c51e85f3329f7c250fd7ae5cbc51890e1d3f07f7f2dadb059dca78a9a1801b74f6f66fbfaa02631cafb322bd20ec4dcc7314540c51c70eaa0163f44fe477fba0ee14956cb7f49806a5ff4fed7281b8fdf7ef0a200c95175fff48e1118e6f52a2cf6d62c33c4f0428ffcf7b5731abc07c11d5327e59ffdeb2a228d37ff39d14cb80e932d3d843300bff1f60ee5e5a37e779c2095a9292d3d7cf52ee53caca030"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000200)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0xbe, 0x0, 0xffff, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2d, 0xfd, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f2bfcb3d160e12518f7e0f30e4d12742"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7d, 0x40, 0x5, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9d, 0x2, 0x1, 0x7f, "8c4ae42c", "8e863e38"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4783fa14dc199c7d, 0x3, 0x5, 0x81, 0x9, 0x88f}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x15, 0x79, "02ad0765e11b464ac09523cd0c04d604adc3da86007ddfbd3f7062e5a320b7e165ff5c87793a0860994244a92528f04deca7988105394633952a3bf103b7994674e2df97ab439ffd661aa09d5b08c7f9bea6a42ae993e42567c93f37e1857a5804894e698dcfcfb43e15b9e1b6107cbf0e71dbfe0aa7fdba86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xd75}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "056d"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "068e"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(r1, &(0x7f0000000a40)={0x24, &(0x7f00000008c0)={0x0, 0xe, 0xba, {0xba, 0x11, "eca8b0e60200063c7972f02252e8fd00ddb7767808c9f4edfee03338f0df2211f1da63922974c1a4c3021f8447fd9acb20bab9b0236a374cc4f45b5fa15697401833e7a9ef7a664de136a99aec2e70608b006725c7a7dbd570da940ac5ffa6be836dc883fa06b324e134dc2a226431dd755d6d7465b87a17f5805d4f72724e2bda354f8adf3db93c049fc13bb7472e3766af2371bc18c02fd669a0dbedc4feea7cce215f095d3e781aa6835d62af08fd129548d21e67b2ca"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f00000009c0)={0x0, 0x22, 0x1f, {[@global=@item_4={0x3, 0x1, 0xa, "dc8346c9"}, @local=@item_012={0x2, 0x2, 0xa, "0cfb"}, @global=@item_4={0x3, 0x1, 0x2, "16146598"}, @global=@item_4={0x3, 0x1, 0x2, "e148f5ab"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x1, 0x0, 0xc, 'o'}, @local=@item_4={0x3, 0x2, 0x7, "6b9e9f09"}, @local=@item_4={0x3, 0x2, 0x5, "4b26cd68"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x7, 0x1, {0x22, 0xf20}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x20, 0x7, 0x77, "83129c33b17ab4ca39bfa8b200b18c070f6f4f717f083900d11631b3697090e19d9cc2db0a680ae9eaaa88ddd6bcb05010bf3be2517acc5afeb377ff6734590adfa3a2405a018e2b471e7a747df99757d20c9170845b787b2d2a61d485a5fa81ebdd597358b3da0a028ca30e6d14e37aea2a188a1a2a2a"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b80)={0x20, 0x1, 0xe7, "76ce4c776b3b18ce2f570e200aa60f763559ded66c8ba512e62a448399dcecb51bcc530493ddcd5f58021ad17e059d2bdf0cdd7f4a1d344ba4f29750761c3e674130a5cb15483ea14c4851ce64cc263add580d828e4d67632a1b5f6bce3a9b94efb167e33ace7028b7fc667a855c94abdb3e41795841893f53fc18ac8e0472187d9bb0282cd731db4475502eec7885fb7564a7a69f1194fe0834d5405e5bf821650a3a070e90a4a48cc278de9d7a7a518371d4ded7a868110eac907321b11546e3a3411ba377791eeb7b57a4abc45cf90b24f96393e26fd0dc9beeef1325c5572e4bf2e17a0c98"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x7}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) 13:28:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa00}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:56 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000240)={0x28, 0x7, r9, r10, 0xfff, 0xa6d, 0x4}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x55, 0x2, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000300)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000540)={0xc}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x8b00, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r11, 0x3b82, &(0x7f0000000100)={0x18, r14, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14, 0x1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r15}) 13:28:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='-\x00', &(0x7f00000000c0)="67443e4721e043d444d2aceaf0429408d1fdce6fd4fbc3ef376eb7bcad2148291063235fb2e79d74596be53f9318cdc2207cc859877fe8da6a001e03893e446ed91ccb3491a95ff96880a4a4f5fb3ab0970b135d936792fba23fe5cf69bb7cb05ac012d5bf0882bf3418074d4ca3cd93a7a5622131", 0x75) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) (async) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='-\x00', &(0x7f00000000c0)="67443e4721e043d444d2aceaf0429408d1fdce6fd4fbc3ef376eb7bcad2148291063235fb2e79d74596be53f9318cdc2207cc859877fe8da6a001e03893e446ed91ccb3491a95ff96880a4a4f5fb3ab0970b135d936792fba23fe5cf69bb7cb05ac012d5bf0882bf3418074d4ca3cd93a7a5622131", 0x75) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) 13:28:56 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 13:28:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r4}) [ 1123.267433][T17176] usb 5-1: USB disconnect, device number 73 [ 1123.415006][T24214] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1123.475145][T24224] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:56 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='-\x00', &(0x7f00000000c0)="67443e4721e043d444d2aceaf0429408d1fdce6fd4fbc3ef376eb7bcad2148291063235fb2e79d74596be53f9318cdc2207cc859877fe8da6a001e03893e446ed91ccb3491a95ff96880a4a4f5fb3ab0970b135d936792fba23fe5cf69bb7cb05ac012d5bf0882bf3418074d4ca3cd93a7a5622131", 0x75) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) 13:28:56 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x66c740, 0x0) 13:28:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x210280) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100804a0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x78, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x38, 0x40, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xff, 0x7fffffff, 0x5}}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0x8, 0xffff, 0x7f80000}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 13:28:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe00}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1123.728013][T24235] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1123.755763][T24236] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:28:56 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) (async) [ 1123.800835][T24235] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1123.835797][T24235] iommufd_mock iommufd_mock4: Adding to iommu group 1 [ 1123.861785][T24235] sysfs: cannot create duplicate filename '/devices/iommufd_mock4' [ 1123.891157][T24235] CPU: 1 PID: 24235 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1123.901667][T24235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1123.911773][T24235] Call Trace: [ 1123.915087][T24235] [ 1123.918040][T24235] dump_stack_lvl+0x125/0x1b0 [ 1123.922755][T24235] sysfs_warn_dup+0x7f/0xa0 [ 1123.927396][T24235] sysfs_create_dir_ns+0x247/0x2a0 [ 1123.932576][T24235] ? sysfs_create_mount_point+0xb0/0xb0 [ 1123.938183][T24235] ? spin_bug+0x1d0/0x1d0 [ 1123.942575][T24235] ? do_raw_spin_unlock+0x173/0x230 [ 1123.947831][T24235] kobject_add_internal+0x2c8/0x960 [ 1123.953077][T24235] kobject_add+0x16f/0x240 [ 1123.957535][T24235] ? kset_create_and_add+0x190/0x190 [ 1123.962861][T24235] ? kobject_put+0xbe/0x440 [ 1123.967421][T24235] ? bus_get_dev_root+0x5e/0x80 [ 1123.972326][T24235] device_add+0x289/0x1aa0 [ 1123.976800][T24235] ? device_initialize+0x510/0x510 [ 1123.981961][T24235] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1123.988850][T24235] ? __init_waitqueue_head+0xca/0x150 [ 1123.994264][T24235] iommufd_test+0x1c47/0x2e60 [ 1123.999009][T24235] ? reacquire_held_locks+0x4b0/0x4b0 [ 1124.004433][T24235] ? iommufd_selftest_destroy+0x100/0x100 [ 1124.010297][T24235] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1124.015378][T24235] iommufd_fops_ioctl+0x347/0x4d0 [ 1124.020455][T24235] ? iommufd_destroy+0x180/0x180 [ 1124.025560][T24235] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1124.030549][T24235] ? iommufd_destroy+0x180/0x180 [ 1124.035530][T24235] __x64_sys_ioctl+0x18f/0x210 [ 1124.040344][T24235] do_syscall_64+0x38/0xb0 [ 1124.044803][T24235] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1124.050853][T24235] RIP: 0033:0x7f69ab27cae9 [ 1124.055301][T24235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1124.075024][T24235] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.083482][T24235] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1124.091490][T24235] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1124.099506][T24235] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1124.107527][T24235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.115525][T24235] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1124.123586][T24235] [ 1124.132600][T17176] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1124.185688][T24235] kobject: kobject_add_internal failed for iommufd_mock4 with -EEXIST, don't try to register things with the same name in the same directory. [ 1124.210290][T24235] sysfs: cannot create duplicate filename '/devices/iommufd_mock4' [ 1124.219511][T24235] CPU: 0 PID: 24235 Comm: syz-executor.5 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1124.230260][T24235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1124.240452][T24235] Call Trace: [ 1124.243754][T24235] [ 1124.246713][T24235] dump_stack_lvl+0x125/0x1b0 [ 1124.251428][T24235] sysfs_warn_dup+0x7f/0xa0 [ 1124.255969][T24235] sysfs_create_dir_ns+0x247/0x2a0 [ 1124.261120][T24235] ? sysfs_create_mount_point+0xb0/0xb0 [ 1124.266706][T24235] ? spin_bug+0x1d0/0x1d0 [ 1124.271080][T24235] ? do_raw_spin_unlock+0x173/0x230 [ 1124.276325][T24235] kobject_add_internal+0x2c8/0x960 [ 1124.281564][T24235] kobject_add+0x16f/0x240 [ 1124.286187][T24235] ? kset_create_and_add+0x190/0x190 [ 1124.291510][T24235] ? kobject_put+0xbe/0x440 [ 1124.296049][T24235] ? bus_get_dev_root+0x5e/0x80 [ 1124.300941][T24235] device_add+0x289/0x1aa0 [ 1124.305426][T24235] ? device_initialize+0x510/0x510 [ 1124.310691][T24235] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1124.317579][T24235] ? __init_waitqueue_head+0xca/0x150 [ 1124.322991][T24235] iommufd_test+0x1c47/0x2e60 [ 1124.327708][T24235] ? reacquire_held_locks+0x4b0/0x4b0 [ 1124.333654][T24235] ? iommufd_selftest_destroy+0x100/0x100 [ 1124.339417][T24235] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1124.344484][T24235] iommufd_fops_ioctl+0x347/0x4d0 [ 1124.349552][T24235] ? iommufd_destroy+0x180/0x180 [ 1124.354535][T24235] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1124.359508][T24235] ? iommufd_destroy+0x180/0x180 [ 1124.364480][T24235] __x64_sys_ioctl+0x18f/0x210 [ 1124.369276][T24235] do_syscall_64+0x38/0xb0 [ 1124.373740][T24235] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1124.379665][T24235] RIP: 0033:0x7f69ab27cae9 [ 1124.384121][T24235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1124.403847][T24235] RSP: 002b:00007f69abf290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.412330][T24235] RAX: ffffffffffffffda RBX: 00007f69ab39bf80 RCX: 00007f69ab27cae9 [ 1124.421546][T24235] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1124.429718][T24235] RBP: 00007f69ab2c847a R08: 0000000000000000 R09: 0000000000000000 [ 1124.438063][T24235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.446337][T24235] R13: 000000000000000b R14: 00007f69ab39bf80 R15: 00007f69ab4bfa48 [ 1124.454393][T24235] [ 1124.508278][T24235] kobject: kobject_add_internal failed for iommufd_mock4 with -EEXIST, don't try to register things with the same name in the same directory. [ 1124.517874][T24249] iommufd_mock iommufd_mock5: Adding to iommu group 3 [ 1124.593680][T17176] usb 5-1: Using ep0 maxpacket: 8 [ 1124.767833][T17176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1124.780751][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1124.791529][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1124.804770][T17176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.818545][T17176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1124.829575][T17176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:28:57 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xb6, {0xb6, 0x10, "27d7e414336a466d3b45c618bbfbd4bf8ae8691cf764c4b8a806a29f4d89b2863a5f9758957aebc5e0b815e224f94b6f9cf3b6274ca229eba9f32f7b6a71d61d32f58273dfba1b107a5b7256026172a910730c7d71ae6400c00e88faf484b00435ae40c37ce30f4d88054644de20e811cee527a333fd20e284e2c841dffd65fd5b59eeedc32fb9c0f0b28fe0124cb0aa22428b0004e8cf5756a329ba7b609a9b2d0452f415d33379a5aeff6941de75d7add55eb8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0xf, 0x8d, "1d09132e75080e012fc6b52773c2e566652c6eb6d33953c8eaa25c8bff0020f823e45126644e5278921f15a5e72f39ea24a54103deb50e7475d6eebc6938d77d43c1f9e7f6d061cf8a50cb2e5840ea32da71b742d75b51b530f1314615feeab1eb850213a954cfea8eb9718ad3295587d70393ae481b1deed81f89346f81c97bc923b2f2b41016ed77c8585627"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:28:57 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x66c740, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x66c740, 0x0) (async) 13:28:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x210280) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100804a0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x78, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x38, 0x40, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xff, 0x7fffffff, 0x5}}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0x8, 0xffff, 0x7f80000}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x210280) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100804a0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x78, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x38, 0x40, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xff, 0x7fffffff, 0x5}}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0x8, 0xffff, 0x7f80000}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async) 13:28:57 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:28:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:28:57 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) (async) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) [ 1125.093955][T17176] usb 5-1: usb_control_msg returned -32 [ 1125.099663][T17176] usbtmc 5-1:16.0: can't read capabilities [ 1125.155298][T24257] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1125.197584][T17176] usb 5-1: USB disconnect, device number 74 [ 1125.214861][T24258] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1125.228229][T24264] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1125.271632][T24264] CPU: 0 PID: 24264 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1125.282143][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1125.292345][T24264] Call Trace: [ 1125.295664][T24264] [ 1125.298637][T24264] dump_stack_lvl+0x125/0x1b0 [ 1125.303376][T24264] sysfs_warn_dup+0x7f/0xa0 [ 1125.308470][T24264] sysfs_create_dir_ns+0x247/0x2a0 [ 1125.313746][T24264] ? sysfs_create_mount_point+0xb0/0xb0 [ 1125.319361][T24264] ? spin_bug+0x1d0/0x1d0 [ 1125.323769][T24264] ? do_raw_spin_unlock+0x173/0x230 [ 1125.329057][T24264] kobject_add_internal+0x2c8/0x960 [ 1125.334337][T24264] kobject_add+0x16f/0x240 [ 1125.338820][T24264] ? kset_create_and_add+0x190/0x190 [ 1125.344183][T24264] ? kobject_put+0xbe/0x440 [ 1125.348752][T24264] ? bus_get_dev_root+0x5e/0x80 [ 1125.353667][T24264] device_add+0x289/0x1aa0 [ 1125.358141][T24264] ? device_initialize+0x510/0x510 [ 1125.363354][T24264] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 13:28:58 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x210280) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100804a0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x78, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x38, 0x40, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xff, 0x7fffffff, 0x5}}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0x8, 0xffff, 0x7f80000}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 13:28:58 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0xb, 0x1b8, 0x440, 0x2f8, 0x1b8, 0x668, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'tunl0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ef0d"}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffefffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) [ 1125.370369][T24264] ? __init_waitqueue_head+0xca/0x150 [ 1125.375827][T24264] iommufd_test+0x1c47/0x2e60 [ 1125.380594][T24264] ? reacquire_held_locks+0x4b0/0x4b0 [ 1125.386054][T24264] ? iommufd_selftest_destroy+0x100/0x100 [ 1125.391858][T24264] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1125.397066][T24264] iommufd_fops_ioctl+0x347/0x4d0 [ 1125.402168][T24264] ? iommufd_destroy+0x180/0x180 [ 1125.407204][T24264] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1125.412209][T24264] ? iommufd_destroy+0x180/0x180 [ 1125.417216][T24264] __x64_sys_ioctl+0x18f/0x210 [ 1125.422050][T24264] do_syscall_64+0x38/0xb0 [ 1125.426530][T24264] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.432490][T24264] RIP: 0033:0x7f798a67cae9 [ 1125.437001][T24264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1125.456677][T24264] RSP: 002b:00007f798b3240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1125.465153][T24264] RAX: ffffffffffffffda RBX: 00007f798a79c050 RCX: 00007f798a67cae9 [ 1125.473182][T24264] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1125.481210][T24264] RBP: 00007f798a6c847a R08: 0000000000000000 R09: 0000000000000000 [ 1125.489351][T24264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.497393][T24264] R13: 000000000000000b R14: 00007f798a79c050 R15: 00007f798a8bfa48 [ 1125.505531][T24264] [ 1125.546359][T24276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1125.555099][T24264] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:58 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "7f82f23839661ad2734c6deaa43a2e429cf590b2539c0f9ca3fd96204fb3e552", 0x1, 0x800, 0x80000001, 0x10001}, 0x3c) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r1, 0x0, 0xef, 0x0, &(0x7f0000000080)="b5dc034a72f269058b6f5c5f9e2c6a28284d0f583fbf60525834cbb7a48f9ab64d8f556ccfeb9b7b3b6e212eb7fb09c75c0808b68e0c81362c1f335dbfab52a04c32a1cdabf80f0450692e4ca3c365e24a990a2f151240183d5683da3e95e1629dac804ca12c89d241855446378a86075fcece3f30df558affb054d49ce48f09887859fff0e41949185984bf12b09f74aa3663e324b1404bbdfae2ff9b5ceec04f8efd829868872872741783d99581470a57e5eaeaf523d4dae1aad17f4e7a26f84efdd833d948b877adb96e39b21f930c6df953b7ac2534d3b03b7c4486ec5f3a58f96cb0b3877dbd6640ac7bdc2d", 0x0, 0x401, 0x0, 0x78, 0x0, &(0x7f0000000180)="ee724ab51fbb9f2cc250e4a4474cb311eac304f8da9b8a12b3a51371012e9f8a4eb580bf82fedf52c59ca77b3e7e53781f1b54487ffd16199e27f9558ad374dac0a9473dfaeb8db3275670885a33017d70ddb63e711d3eba3347d5e0b27b62ca8001c3ef5f79826d650ace2236635fe3e6d1fe283c60c712", 0x0, 0x2, 0x0, 0x2d}, 0x50) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, 0xffffffffffffffff, "e185c0047f12f1fe613dd310420640a4f7508ae9d9e9d3d2938c832e96bc110f", 0xcd7d, 0x80000001, 0x6, 0x1}, 0x3c) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) [ 1125.594817][T24277] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1125.615582][T24276] iommufd_mock iommufd_mock3: Adding to iommu group 1 [ 1125.639861][T24266] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 1125.661112][T24266] CPU: 0 PID: 24266 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1125.671626][T24266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1125.681736][T24266] Call Trace: [ 1125.685063][T24266] [ 1125.688039][T24266] dump_stack_lvl+0x125/0x1b0 [ 1125.692788][T24266] sysfs_warn_dup+0x7f/0xa0 [ 1125.697374][T24266] sysfs_create_dir_ns+0x247/0x2a0 [ 1125.702560][T24266] ? sysfs_create_mount_point+0xb0/0xb0 [ 1125.708182][T24266] ? spin_bug+0x1d0/0x1d0 [ 1125.712608][T24266] ? do_raw_spin_unlock+0x173/0x230 [ 1125.717901][T24266] kobject_add_internal+0x2c8/0x960 [ 1125.723202][T24266] kobject_add+0x16f/0x240 [ 1125.727695][T24266] ? kset_create_and_add+0x190/0x190 [ 1125.733496][T24266] ? kobject_put+0xbe/0x440 [ 1125.738080][T24266] ? bus_get_dev_root+0x5e/0x80 [ 1125.743100][T24266] device_add+0x289/0x1aa0 [ 1125.747594][T24266] ? device_initialize+0x510/0x510 [ 1125.753159][T24266] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1125.760110][T24266] ? __init_waitqueue_head+0xca/0x150 [ 1125.765573][T24266] iommufd_test+0x1c47/0x2e60 [ 1125.770329][T24266] ? reacquire_held_locks+0x4b0/0x4b0 [ 1125.775797][T24266] ? iommufd_selftest_destroy+0x100/0x100 [ 1125.781600][T24266] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1125.786718][T24266] iommufd_fops_ioctl+0x347/0x4d0 [ 1125.791833][T24266] ? iommufd_destroy+0x180/0x180 [ 1125.796953][T24266] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1125.801979][T24266] ? iommufd_destroy+0x180/0x180 [ 1125.806997][T24266] __x64_sys_ioctl+0x18f/0x210 [ 1125.811927][T24266] do_syscall_64+0x38/0xb0 [ 1125.816415][T24266] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.822380][T24266] RIP: 0033:0x7f29a6e7cae9 13:28:58 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "7f82f23839661ad2734c6deaa43a2e429cf590b2539c0f9ca3fd96204fb3e552", 0x1, 0x800, 0x80000001, 0x10001}, 0x3c) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r1, 0x0, 0xef, 0x0, &(0x7f0000000080)="b5dc034a72f269058b6f5c5f9e2c6a28284d0f583fbf60525834cbb7a48f9ab64d8f556ccfeb9b7b3b6e212eb7fb09c75c0808b68e0c81362c1f335dbfab52a04c32a1cdabf80f0450692e4ca3c365e24a990a2f151240183d5683da3e95e1629dac804ca12c89d241855446378a86075fcece3f30df558affb054d49ce48f09887859fff0e41949185984bf12b09f74aa3663e324b1404bbdfae2ff9b5ceec04f8efd829868872872741783d99581470a57e5eaeaf523d4dae1aad17f4e7a26f84efdd833d948b877adb96e39b21f930c6df953b7ac2534d3b03b7c4486ec5f3a58f96cb0b3877dbd6640ac7bdc2d", 0x0, 0x401, 0x0, 0x78, 0x0, &(0x7f0000000180)="ee724ab51fbb9f2cc250e4a4474cb311eac304f8da9b8a12b3a51371012e9f8a4eb580bf82fedf52c59ca77b3e7e53781f1b54487ffd16199e27f9558ad374dac0a9473dfaeb8db3275670885a33017d70ddb63e711d3eba3347d5e0b27b62ca8001c3ef5f79826d650ace2236635fe3e6d1fe283c60c712", 0x0, 0x2, 0x0, 0x2d}, 0x50) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, 0xffffffffffffffff, "e185c0047f12f1fe613dd310420640a4f7508ae9d9e9d3d2938c832e96bc110f", 0xcd7d, 0x80000001, 0x6, 0x1}, 0x3c) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) [ 1125.826854][T24266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1125.846614][T24266] RSP: 002b:00007f29a7c1d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1125.855095][T24266] RAX: ffffffffffffffda RBX: 00007f29a6f9bf80 RCX: 00007f29a6e7cae9 [ 1125.863128][T24266] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1125.871151][T24266] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1125.879365][T24266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.887399][T24266] R13: 000000000000000b R14: 00007f29a6f9bf80 R15: 00007f29a70bfa48 13:28:58 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x66c740, 0x0) [ 1125.895452][T24266] [ 1125.931956][T24266] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. 13:28:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1f00}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1126.061736][T24287] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1126.124057][T17176] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1126.395545][T17176] usb 5-1: Using ep0 maxpacket: 8 [ 1126.533715][T17176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1126.545103][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1126.555340][T17176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1126.566482][T17176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.580104][T17176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1126.593087][T17176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.873619][T17176] usb 5-1: usb_control_msg returned -32 [ 1126.879319][T17176] usbtmc 5-1:16.0: can't read capabilities [ 1127.433418][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.442617][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.451759][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.461063][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.470561][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.479713][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.489055][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.498228][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.507543][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.516665][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.525803][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.534973][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.544135][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.553273][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.562490][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1127.571618][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:29:01 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xb6, {0xb6, 0x10, "27d7e414336a466d3b45c618bbfbd4bf8ae8691cf764c4b8a806a29f4d89b2863a5f9758957aebc5e0b815e224f94b6f9cf3b6274ca229eba9f32f7b6a71d61d32f58273dfba1b107a5b7256026172a910730c7d71ae6400c00e88faf484b00435ae40c37ce30f4d88054644de20e811cee527a333fd20e284e2c841dffd65fd5b59eeedc32fb9c0f0b28fe0124cb0aa22428b0004e8cf5756a329ba7b609a9b2d0452f415d33379a5aeff6941de75d7add55eb8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0xf, 0x8d, "1d09132e75080e012fc6b52773c2e566652c6eb6d33953c8eaa25c8bff0020f823e45126644e5278921f15a5e72f39ea24a54103deb50e7475d6eebc6938d77d43c1f9e7f6d061cf8a50cb2e5840ea32da71b742d75b51b530f1314615feeab1eb850213a954cfea8eb9718ad3295587d70393ae481b1deed81f89346f81c97bc923b2f2b41016ed77c8585627"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xb6, {0xb6, 0x10, "27d7e414336a466d3b45c618bbfbd4bf8ae8691cf764c4b8a806a29f4d89b2863a5f9758957aebc5e0b815e224f94b6f9cf3b6274ca229eba9f32f7b6a71d61d32f58273dfba1b107a5b7256026172a910730c7d71ae6400c00e88faf484b00435ae40c37ce30f4d88054644de20e811cee527a333fd20e284e2c841dffd65fd5b59eeedc32fb9c0f0b28fe0124cb0aa22428b0004e8cf5756a329ba7b609a9b2d0452f415d33379a5aeff6941de75d7add55eb8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0xf, 0x8d, "1d09132e75080e012fc6b52773c2e566652c6eb6d33953c8eaa25c8bff0020f823e45126644e5278921f15a5e72f39ea24a54103deb50e7475d6eebc6938d77d43c1f9e7f6d061cf8a50cb2e5840ea32da71b742d75b51b530f1314615feeab1eb850213a954cfea8eb9718ad3295587d70393ae481b1deed81f89346f81c97bc923b2f2b41016ed77c8585627"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1}}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) 13:29:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0xb, 0x1b8, 0x440, 0x2f8, 0x1b8, 0x668, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'tunl0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ef0d"}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffefffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:29:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "7f82f23839661ad2734c6deaa43a2e429cf590b2539c0f9ca3fd96204fb3e552", 0x1, 0x800, 0x80000001, 0x10001}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "7f82f23839661ad2734c6deaa43a2e429cf590b2539c0f9ca3fd96204fb3e552", 0x1, 0x800, 0x80000001, 0x10001}, 0x3c) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r1, 0x0, 0xef, 0x0, &(0x7f0000000080)="b5dc034a72f269058b6f5c5f9e2c6a28284d0f583fbf60525834cbb7a48f9ab64d8f556ccfeb9b7b3b6e212eb7fb09c75c0808b68e0c81362c1f335dbfab52a04c32a1cdabf80f0450692e4ca3c365e24a990a2f151240183d5683da3e95e1629dac804ca12c89d241855446378a86075fcece3f30df558affb054d49ce48f09887859fff0e41949185984bf12b09f74aa3663e324b1404bbdfae2ff9b5ceec04f8efd829868872872741783d99581470a57e5eaeaf523d4dae1aad17f4e7a26f84efdd833d948b877adb96e39b21f930c6df953b7ac2534d3b03b7c4486ec5f3a58f96cb0b3877dbd6640ac7bdc2d", 0x0, 0x401, 0x0, 0x78, 0x0, &(0x7f0000000180)="ee724ab51fbb9f2cc250e4a4474cb311eac304f8da9b8a12b3a51371012e9f8a4eb580bf82fedf52c59ca77b3e7e53781f1b54487ffd16199e27f9558ad374dac0a9473dfaeb8db3275670885a33017d70ddb63e711d3eba3347d5e0b27b62ca8001c3ef5f79826d650ace2236635fe3e6d1fe283c60c712", 0x0, 0x2, 0x0, 0x2d}, 0x50) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r1, 0x0, 0xef, 0x0, &(0x7f0000000080)="b5dc034a72f269058b6f5c5f9e2c6a28284d0f583fbf60525834cbb7a48f9ab64d8f556ccfeb9b7b3b6e212eb7fb09c75c0808b68e0c81362c1f335dbfab52a04c32a1cdabf80f0450692e4ca3c365e24a990a2f151240183d5683da3e95e1629dac804ca12c89d241855446378a86075fcece3f30df558affb054d49ce48f09887859fff0e41949185984bf12b09f74aa3663e324b1404bbdfae2ff9b5ceec04f8efd829868872872741783d99581470a57e5eaeaf523d4dae1aad17f4e7a26f84efdd833d948b877adb96e39b21f930c6df953b7ac2534d3b03b7c4486ec5f3a58f96cb0b3877dbd6640ac7bdc2d", 0x0, 0x401, 0x0, 0x78, 0x0, &(0x7f0000000180)="ee724ab51fbb9f2cc250e4a4474cb311eac304f8da9b8a12b3a51371012e9f8a4eb580bf82fedf52c59ca77b3e7e53781f1b54487ffd16199e27f9558ad374dac0a9473dfaeb8db3275670885a33017d70ddb63e711d3eba3347d5e0b27b62ca8001c3ef5f79826d650ace2236635fe3e6d1fe283c60c712", 0x0, 0x2, 0x0, 0x2d}, 0x50) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000001080)=""/152, 0x98}], 0x1, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, 0xffffffffffffffff, "e185c0047f12f1fe613dd310420640a4f7508ae9d9e9d3d2938c832e96bc110f", 0xcd7d, 0x80000001, 0x6, 0x1}, 0x3c) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 13:29:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x2, 0xe95}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x7ffffffc00000000, 0x80000007}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, r11, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, r11, 0x8}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r7}) 13:29:01 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffef8, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x30, r7, 0xd586000) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x21000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r10, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8000000000000001}) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x4010, r6, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:29:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3f00}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) [ 1128.614483][T24163] usb 5-1: USB disconnect, device number 75 [ 1128.680854][T24295] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1128.749367][T24299] xt_TPROXY: Can be used only with -p tcp or -p udp 13:29:01 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x47, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f00000003c0)=[r1, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, 0x2, 0xa, 0x0, r2}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/146, 0x7a}, {&(0x7f0000000040)=""/2, 0x2}], 0x1000000000000249, 0x401, 0x0) [ 1128.812192][T24299] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1128.839649][T24310] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 1128.890615][T24310] CPU: 0 PID: 24310 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1128.901260][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1128.911492][T24310] Call Trace: [ 1128.914852][T24310] [ 1128.917838][T24310] dump_stack_lvl+0x125/0x1b0 [ 1128.922594][T24310] sysfs_warn_dup+0x7f/0xa0 [ 1128.927184][T24310] sysfs_create_dir_ns+0x247/0x2a0 [ 1128.932376][T24310] ? sysfs_create_mount_point+0xb0/0xb0 [ 1128.938003][T24310] ? spin_bug+0x1d0/0x1d0 [ 1128.942424][T24310] ? do_raw_spin_unlock+0x173/0x230 [ 1128.947800][T24310] kobject_add_internal+0x2c8/0x960 [ 1128.953097][T24310] kobject_add+0x16f/0x240 [ 1128.957699][T24310] ? kset_create_and_add+0x190/0x190 [ 1128.963073][T24310] ? kobject_put+0xbe/0x440 [ 1128.967652][T24310] ? bus_get_dev_root+0x5e/0x80 [ 1128.972677][T24310] device_add+0x289/0x1aa0 [ 1128.977163][T24310] ? device_initialize+0x510/0x510 [ 1128.982354][T24310] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1128.989381][T24310] ? __init_waitqueue_head+0xca/0x150 [ 1128.994844][T24310] iommufd_test+0x1c47/0x2e60 [ 1128.999639][T24310] ? reacquire_held_locks+0x4b0/0x4b0 [ 1129.005106][T24310] ? iommufd_selftest_destroy+0x100/0x100 [ 1129.010919][T24310] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1129.016037][T24310] iommufd_fops_ioctl+0x347/0x4d0 [ 1129.021144][T24310] ? iommufd_destroy+0x180/0x180 [ 1129.026188][T24310] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1129.031210][T24310] ? iommufd_destroy+0x180/0x180 [ 1129.036223][T24310] __x64_sys_ioctl+0x18f/0x210 13:29:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x2, 0xe95}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x7ffffffc00000000, 0x80000007}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, r11, 0x2, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, r11, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, r11, 0x8}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, r11, 0x8}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r7}) [ 1129.041059][T24310] do_syscall_64+0x38/0xb0 [ 1129.045548][T24310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.051688][T24310] RIP: 0033:0x7f29a6e7cae9 [ 1129.056162][T24310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1129.075845][T24310] RSP: 002b:00007f29a7bfc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.084500][T24310] RAX: ffffffffffffffda RBX: 00007f29a6f9c050 RCX: 00007f29a6e7cae9 [ 1129.092536][T24310] RDX: 0000000020000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1129.100659][T24310] RBP: 00007f29a6ec847a R08: 0000000000000000 R09: 0000000000000000 [ 1129.113732][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.121855][T24310] R13: 000000000000006e R14: 00007f29a6f9c050 R15: 00007f29a70bfa48 [ 1129.129908][T24310] [ 1129.133660][T24163] usb 5-1: new high-speed USB device number 76 using dummy_hcd 13:29:01 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x47, 0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f00000003c0)=[r1, r2], 0x2}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, 0x0}) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, 0x2, 0xa, 0x0, r2}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/146, 0x7a}, {&(0x7f0000000040)=""/2, 0x2}], 0x1000000000000249, 0x401, 0x0) [ 1129.237108][T24310] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 1129.249810][T24325] iommufd_mock iommufd_mock3: Adding to iommu group 0 13:29:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0xb, 0x1b8, 0x440, 0x2f8, 0x1b8, 0x668, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'tunl0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ef0d"}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffefffffff}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r5}) 13:29:02 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x2, 0xe95}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000540)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x7ffffffc00000000, 0x80000007}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x7ffffffc00000000, 0x80000007}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000100)={0x18, r11, 0x2, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, r11, 0x8}) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, &(0x7f00000001c0)={0x8, r7}) [ 1129.434323][T24163] usb 5-1: Using ep0 maxpacket: 8 13:29:02 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x47, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f00000003c0)=[r1, r2], 0x2}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, 0x0}) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, 0x2, 0xa, 0x0, r2}) (async) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x3, 0x0, &(0x7f0000000080)) (async) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/146, 0x7a}, {&(0x7f0000000040)=""/2, 0x2}], 0x1000000000000249, 0x401, 0x0) [ 1129.554241][T24163] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1129.595927][T24163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1129.618649][T24163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1129.670360][T24163] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1129.711014][T24163] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1129.728131][T24345] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1129.742693][T24163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.803032][T24346] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1130.033589][T24163] usb 5-1: usb_control_msg returned -32 [ 1130.039447][T24163] usbtmc 5-1:16.0: can't read capabilities [ 1130.613410][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.623572][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.634625][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.646979][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.658612][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.667811][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.677041][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.686161][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.695284][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.705360][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.714484][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.723888][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.733840][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.742970][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.752435][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1130.761537][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 13:29:03 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xee}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xb6, {0xb6, 0x10, "27d7e414336a466d3b45c618bbfbd4bf8ae8691cf764c4b8a806a29f4d89b2863a5f9758957aebc5e0b815e224f94b6f9cf3b6274ca229eba9f32f7b6a71d61d32f58273dfba1b107a5b7256026172a910730c7d71ae6400c00e88faf484b00435ae40c37ce30f4d88054644de20e811cee527a333fd20e284e2c841dffd65fd5b59eeedc32fb9c0f0b28fe0124cb0aa22428b0004e8cf5756a329ba7b609a9b2d0452f415d33379a5aeff6941de75d7add55eb8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0xf, 0x8d, "1d09132e75080e012fc6b52773c2e566652c6eb6d33953c8eaa25c8bff0020f823e45126644e5278921f15a5e72f39ea24a54103deb50e7475d6eebc6938d77d43c1f9e7f6d061cf8a50cb2e5840ea32da71b742d75b51b530f1314615feeab1eb850213a954cfea8eb9718ad3295587d70393ae481b1deed81f89346f81c97bc923b2f2b41016ed77c8585627"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1}}) (async) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r3, 0x0) semget$private(0x0, 0x1, 0x0) 13:29:03 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f00000001c0)={0x8, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r3, 0x0, &(0x7f0000683000/0x2000)=nil, 0x2000, 0x9}) 13:29:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1, 0x9, 0x0) 13:29:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5c00}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878345}, 0x9c) 13:29:03 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffef8}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffef8, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x30, r7, 0xd586000) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000540)={0xc}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x21000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, r10, 0x2, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) dup(r12) (async) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000280)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r10, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8000000000000001}) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x4010, r6, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r1}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 13:29:03 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) [ 1130.805868][T17191] usb 5-1: USB disconnect, device number 76 [ 1130.950246][T24359] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:29:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1, 0x9, 0x0) [ 1131.090961][T24353] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:29:03 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) [ 1131.142972][T24357] iommufd_mock iommufd_mock2: Adding to iommu group 1 13:29:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1, 0x9, 0x0) 13:29:04 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, &(0x7f00000001c0)={0x8, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r6}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r3, 0x0, &(0x7f0000683000/0x2000)=nil, 0x2000, 0x9}) 13:29:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1, 0xfffffffe) r1 = socket(0x8, 0x800, 0x10001) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x80800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/zoneinfo\x00', 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000009e80)=[{{&(0x7f0000001100), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001180)=""/97, 0x61}, {&(0x7f0000001200)=""/217, 0xd9}], 0x2, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000001580)=""/86, 0x56}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/175, 0xaf}, {&(0x7f0000001700)=""/169, 0xa9}, {&(0x7f00000017c0)=""/59, 0x3b}, {&(0x7f0000001800)=""/89, 0x59}, {&(0x7f0000001880)=""/226, 0xe2}], 0x8, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)=""/217, 0xd9}, {&(0x7f0000001cc0)=""/80, 0x50}, {&(0x7f0000001d40)=""/146, 0x92}, {&(0x7f0000001e00)=""/174, 0xae}], 0x4, &(0x7f0000001f00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000002040)=""/9, 0x9}, {&(0x7f0000002080)=""/1, 0x1}, {&(0x7f00000020c0)=""/183, 0xb7}], 0x3, &(0x7f00000021c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000002280)=@abs, 0x6e, &(0x7f0000003400)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/212, 0xd4}], 0x2, &(0x7f0000003440)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000034c0)=""/64, 0x40}, {&(0x7f0000003500)=""/47, 0x2f}, {&(0x7f0000003540)=""/198, 0xc6}, {&(0x7f0000003640)=""/132, 0x84}], 0x4, &(0x7f0000003740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003800), 0x6e, &(0x7f00000087c0)=[{&(0x7f0000003880)=""/128, 0x80}, {&(0x7f0000003900)=""/95, 0x5f}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f0000004980)=""/235, 0xeb}, {&(0x7f0000004a80)=""/100, 0x64}, {&(0x7f0000004b00)=""/167, 0xa7}], 0x8, &(0x7f0000008840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000008980), 0x6e, &(0x7f0000009d80)=[{&(0x7f0000008a00)=""/192, 0xc0}, {&(0x7f0000008ac0)=""/200, 0xc8}, {&(0x7f0000008bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/48, 0x30}, {&(0x7f0000009bc0)=""/88, 0x58}, {&(0x7f0000009c40)=""/90, 0x5a}, {&(0x7f0000009cc0)=""/181, 0xb5}], 0x7, &(0x7f0000009e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x8, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{r4, 0x0, 0x1000, 0x3, 0x7f, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x0, 0xcc}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)=ANY=[@ANYRES64=r4, @ANYBLOB="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", @ANYBLOB="c697ca307b6d12310ec0d3726c915e2a64690383502c0b7c279e05be352428c3329557ba75b55d685b3cea45ef1ddbf48ed1cf9fff4b0d1f83ffcb0fd9", @ANYRES16=r5]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000000c0)={0x0, r4, "b8ffddf0fcbab7133ece61fd9bcb897238693e62f03e37a073a300f7d7696572004fb087c5e651f7ad586ccac814dd06f0b3429b4e4d4bfad690a1d3d6bf25d02984deda9cf42f480d600e6468b28dcbf6d681f1daeee259732ce9fd361dbcb5ebde249a06795c8210eee9141d775d0422655cd00e0d094135196108be975131a703d52f02aad5dfffda0abc06be8b14829dcb27a8a05c2e0bb61e7589876689b2e0e9b6a3f47a419c31928c823830337339c20f5dfb2272531ee32740abc82237c4fb3be77c5f26cd1917368b7cd0b45fb5cb0594f23fcb30041444c92b3c2e35743cec27573f085d26925ea6c09edf7dd4e13364c4420112f49aba25fea837", "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"}) [ 1131.356015][T24375] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1131.383504][T17191] usb 5-1: new high-speed USB device number 77 using dummy_hcd 13:29:04 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1, 0x0, 0x7ffffffc00000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="70f7f2d3041e03001ce6ffff3e1ded2ccd0007002289e89ddb34e288460f23aefc0f17ffff910a077127e87d72f2ae97ace5d543600f9894e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) [ 1131.554403][T24378] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1131.599316][T24380] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1131.633804][T17191] usb 5-1: Using ep0 maxpacket: 8 [ 1131.707018][T24385] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1131.753637][T17191] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1131.800623][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1131.835151][T17191] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.873554][T17191] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.909479][T17191] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1131.927655][T17191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.234609][T17191] usb 5-1: usb_control_msg returned -32 [ 1132.245014][T17191] usbtmc 5-1:16.0: can't read capabilities [ 1132.453401][ C0] ================================================================== [ 1132.461543][ C0] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40 [ 1132.470225][ C0] Write of size 4 at addr ffff88802ef25910 by task swapper/0/0 [ 1132.477796][ C0] [ 1132.480126][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1132.489770][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1132.499926][ C0] Call Trace: [ 1132.503220][ C0] [ 1132.506087][ C0] dump_stack_lvl+0xd9/0x1b0 [ 1132.510727][ C0] print_report+0xc4/0x620 [ 1132.515213][ C0] ? __virt_addr_valid+0x5e/0x2d0 [ 1132.520256][ C0] ? __phys_addr+0xc6/0x140 [ 1132.524785][ C0] kasan_report+0xda/0x110 [ 1132.529486][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 1132.535236][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 1132.540983][ C0] kasan_check_range+0xef/0x190 [ 1132.545851][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 1132.551420][ C0] __usb_hcd_giveback_urb+0x217/0x5c0 [ 1132.556835][ C0] usb_hcd_giveback_urb+0x389/0x430 [ 1132.562191][ C0] dummy_timer+0x1415/0x35f0 [ 1132.566910][ C0] ? __lock_acquire+0x182f/0x5de0 [ 1132.571999][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1132.577131][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 1132.582385][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1132.587523][ C0] call_timer_fn+0x1a0/0x580 [ 1132.592135][ C0] ? timer_shutdown_sync+0x20/0x20 [ 1132.597283][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 1132.602703][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1132.607879][ C0] __run_timers+0x764/0xb10 [ 1132.612445][ C0] ? call_timer_fn+0x580/0x580 [ 1132.617252][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1132.622586][ C0] ? sched_clock_cpu+0x6d/0x4c0 [ 1132.627471][ C0] run_timer_softirq+0x58/0xd0 [ 1132.632277][ C0] __do_softirq+0x218/0x965 [ 1132.636866][ C0] ? __lock_text_end+0x5/0x5 [ 1132.641500][ C0] irq_exit_rcu+0xb7/0x120 [ 1132.645962][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1132.651619][ C0] [ 1132.654652][ C0] [ 1132.657620][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1132.663646][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 1132.669046][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 97 39 b5 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 1132.688700][ C0] RSP: 0018:ffffffff8c807d70 EFLAGS: 00000246 [ 1132.694819][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a3f00ae [ 1132.702799][ C0] RDX: 0000000000000001 RSI: ffff8880132ee000 RDI: ffff8880132ee064 [ 1132.710805][ C0] RBP: ffff8880132ee064 R08: 0000000000000001 R09: ffffed1017306dbd [ 1132.718807][ C0] R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff8881412ef800 [ 1132.726820][ C0] R13: ffffffff8d6607c0 R14: 0000000000000000 R15: 0000000000000000 [ 1132.734850][ C0] ? ct_kernel_exit+0x12e/0x180 [ 1132.739744][ C0] acpi_idle_enter+0xc5/0x160 [ 1132.744460][ C0] cpuidle_enter_state+0x82/0x500 [ 1132.749504][ C0] ? mark_tsc_async_resets+0x50/0x50 [ 1132.754819][ C0] cpuidle_enter+0x4e/0xa0 [ 1132.759369][ C0] do_idle+0x315/0x3f0 [ 1132.763503][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 1132.768565][ C0] cpu_startup_entry+0x18/0x20 [ 1132.773367][ C0] rest_init+0x16f/0x2b0 [ 1132.777668][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 1132.783801][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 1132.790266][ C0] arch_call_rest_init+0x13/0x30 [ 1132.795223][ C0] start_kernel+0x39f/0x480 [ 1132.799742][ C0] x86_64_start_reservations+0x18/0x30 [ 1132.805257][ C0] x86_64_start_kernel+0xb2/0xc0 [ 1132.810269][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 1132.816445][ C0] [ 1132.819490][ C0] [ 1132.821812][ C0] Allocated by task 24369: [ 1132.826227][ C0] kasan_save_stack+0x33/0x50 [ 1132.830961][ C0] kasan_set_track+0x25/0x30 [ 1132.835577][ C0] __kasan_kmalloc+0xa2/0xb0 [ 1132.840188][ C0] usbtmc_open+0xa6/0x9b0 [ 1132.844630][ C0] usb_open+0x20f/0x2e0 [ 1132.848812][ C0] chrdev_open+0x277/0x700 [ 1132.853258][ C0] do_dentry_open+0x88b/0x1730 [ 1132.858089][ C0] path_openat+0x19af/0x29c0 [ 1132.862740][ C0] do_filp_open+0x1de/0x430 [ 1132.867326][ C0] do_sys_openat2+0x176/0x1e0 [ 1132.872016][ C0] __x64_sys_openat+0x175/0x210 [ 1132.876879][ C0] do_syscall_64+0x38/0xb0 [ 1132.881330][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1132.887324][ C0] [ 1132.889690][ C0] Freed by task 24369: [ 1132.893789][ C0] kasan_save_stack+0x33/0x50 [ 1132.898851][ C0] kasan_set_track+0x25/0x30 [ 1132.903472][ C0] kasan_save_free_info+0x2b/0x40 [ 1132.908544][ C0] ____kasan_slab_free+0x15b/0x1b0 [ 1132.913725][ C0] slab_free_freelist_hook+0x114/0x1e0 [ 1132.919241][ C0] __kmem_cache_free+0xb8/0x2f0 [ 1132.924115][ C0] usbtmc_release+0x285/0x390 [ 1132.928810][ C0] __fput+0x3f7/0xa70 [ 1132.932814][ C0] task_work_run+0x14d/0x240 [ 1132.937439][ C0] exit_to_user_mode_prepare+0x210/0x240 [ 1132.943086][ C0] syscall_exit_to_user_mode+0x1d/0x60 [ 1132.948589][ C0] do_syscall_64+0x44/0xb0 [ 1132.953098][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1132.959028][ C0] [ 1132.961376][ C0] Last potentially related work creation: [ 1132.967118][ C0] kasan_save_stack+0x33/0x50 [ 1132.971850][ C0] __kasan_record_aux_stack+0xbc/0xd0 [ 1132.977583][ C0] __call_rcu_common.constprop.0+0x9a/0x790 [ 1132.983509][ C0] sctp_transport_put+0x121/0x180 [ 1132.988741][ C0] sctp_association_free+0x4d3/0x7d0 [ 1132.994060][ C0] sctp_do_sm+0x2636/0x5c40 [ 1132.998589][ C0] sctp_assoc_bh_rcv+0x392/0x6f0 [ 1133.003572][ C0] sctp_inq_push+0x1d5/0x270 [ 1133.008212][ C0] sctp_backlog_rcv+0x169/0x590 [ 1133.013106][ C0] __release_sock+0x132/0x3a0 [ 1133.017832][ C0] release_sock+0x58/0x1b0 [ 1133.022266][ C0] sctp_close+0x447/0x940 [ 1133.026621][ C0] inet_release+0x132/0x270 [ 1133.031176][ C0] inet6_release+0x4f/0x70 [ 1133.035604][ C0] __sock_release+0xae/0x260 [ 1133.040255][ C0] sock_close+0x1c/0x20 [ 1133.044448][ C0] __fput+0x3f7/0xa70 [ 1133.048448][ C0] __fput_sync+0x47/0x50 [ 1133.052722][ C0] __x64_sys_close+0x87/0xf0 [ 1133.057351][ C0] do_syscall_64+0x38/0xb0 [ 1133.061798][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.067708][ C0] [ 1133.070036][ C0] Second to last potentially related work creation: [ 1133.076620][ C0] kasan_save_stack+0x33/0x50 [ 1133.081342][ C0] __kasan_record_aux_stack+0xbc/0xd0 [ 1133.086826][ C0] __call_rcu_common.constprop.0+0x9a/0x790 [ 1133.092742][ C0] sctp_transport_put+0x121/0x180 [ 1133.097846][ C0] sctp_association_free+0x4d3/0x7d0 [ 1133.103158][ C0] sctp_do_sm+0x2636/0x5c40 [ 1133.107827][ C0] sctp_assoc_bh_rcv+0x392/0x6f0 [ 1133.112856][ C0] sctp_inq_push+0x1d5/0x270 [ 1133.117475][ C0] sctp_backlog_rcv+0x169/0x590 [ 1133.122356][ C0] __release_sock+0x132/0x3a0 [ 1133.127061][ C0] release_sock+0x58/0x1b0 [ 1133.131539][ C0] sctp_wait_for_connect+0x1c8/0x5b0 [ 1133.137284][ C0] __sctp_connect+0x9a3/0xc30 [ 1133.141985][ C0] sctp_inet_connect+0x15f/0x1f0 [ 1133.146947][ C0] __sys_connect_file+0x15b/0x1a0 [ 1133.151993][ C0] __sys_connect+0x145/0x170 [ 1133.156618][ C0] __x64_sys_connect+0x72/0xb0 [ 1133.161447][ C0] do_syscall_64+0x38/0xb0 [ 1133.165896][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.171822][ C0] [ 1133.174145][ C0] The buggy address belongs to the object at ffff88802ef25800 [ 1133.174145][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1133.188205][ C0] The buggy address is located 272 bytes inside of [ 1133.188205][ C0] freed 1024-byte region [ffff88802ef25800, ffff88802ef25c00) [ 1133.202350][ C0] [ 1133.204691][ C0] The buggy address belongs to the physical page: [ 1133.211140][ C0] page:ffffea0000bbc800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ef20 [ 1133.221335][ C0] head:ffffea0000bbc800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1133.230292][ C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1133.238278][ C0] page_type: 0xffffffff() [ 1133.242638][ C0] raw: 00fff00000000840 ffff888012c41dc0 dead000000000100 dead000000000122 [ 1133.251255][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1133.259942][ C0] page dumped because: kasan: bad access detected [ 1133.266405][ C0] page_owner tracks the page as allocated [ 1133.272118][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 782, tgid 782 (kworker/1:2), ts 925961113646, free_ts 924899384202 [ 1133.292737][ C0] post_alloc_hook+0x2cf/0x340 [ 1133.297517][ C0] get_page_from_freelist+0xee0/0x2f20 [ 1133.302986][ C0] __alloc_pages+0x1d0/0x4a0 [ 1133.307604][ C0] alloc_pages+0x1a9/0x270 [ 1133.312083][ C0] allocate_slab+0x251/0x380 [ 1133.316718][ C0] ___slab_alloc+0x8be/0x1570 [ 1133.321517][ C0] __slab_alloc.constprop.0+0x56/0xa0 [ 1133.326943][ C0] __kmem_cache_alloc_node+0x137/0x350 [ 1133.332426][ C0] __kmalloc+0x4f/0x100 [ 1133.336587][ C0] ieee802_11_parse_elems_full+0xc7/0x1380 [ 1133.342495][ C0] ieee80211_ibss_rx_queued_mgmt+0xc65/0x2ee0 [ 1133.348631][ C0] ieee80211_iface_work+0xa1f/0xd40 [ 1133.353896][ C0] cfg80211_wiphy_work+0x24e/0x330 [ 1133.359098][ C0] process_one_work+0x887/0x15d0 [ 1133.364085][ C0] worker_thread+0x8bb/0x1290 [ 1133.368798][ C0] kthread+0x33a/0x430 [ 1133.372885][ C0] page last free stack trace: [ 1133.377574][ C0] free_unref_page_prepare+0x476/0xa40 [ 1133.383064][ C0] free_unref_page+0x33/0x3b0 [ 1133.387749][ C0] qlist_free_all+0x6a/0x170 [ 1133.392355][ C0] kasan_quarantine_reduce+0x18b/0x1d0 [ 1133.397915][ C0] __kasan_slab_alloc+0x65/0x90 [ 1133.402776][ C0] __kmem_cache_alloc_node+0x19b/0x350 [ 1133.408285][ C0] kmalloc_trace+0x25/0xe0 [ 1133.412920][ C0] usb_control_msg+0xbd/0x4a0 [ 1133.417618][ C0] hub_port_disable+0x1d0/0x600 [ 1133.422489][ C0] hub_port_init+0xb7a/0x3850 [ 1133.427205][ C0] hub_event+0x2b64/0x4e00 [ 1133.431638][ C0] process_one_work+0x887/0x15d0 [ 1133.436605][ C0] worker_thread+0x8bb/0x1290 [ 1133.441312][ C0] kthread+0x33a/0x430 [ 1133.445411][ C0] ret_from_fork+0x45/0x80 [ 1133.449845][ C0] ret_from_fork_asm+0x11/0x20 [ 1133.454652][ C0] [ 1133.457007][ C0] Memory state around the buggy address: [ 1133.462760][ C0] ffff88802ef25800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.471024][ C0] ffff88802ef25880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.479370][ C0] >ffff88802ef25900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.487439][ C0] ^ [ 1133.492028][ C0] ffff88802ef25980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.500094][ C0] ffff88802ef25a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.508172][ C0] ================================================================== [ 1133.516275][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1133.523549][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0 [ 1133.533305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1133.544198][ C0] Call Trace: [ 1133.547603][ C0] [ 1133.550456][ C0] dump_stack_lvl+0xd9/0x1b0 [ 1133.555078][ C0] panic+0x6a6/0x750 [ 1133.559029][ C0] ? panic_smp_self_stop+0xa0/0xa0 [ 1133.564190][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 1133.569592][ C0] ? dump_page+0x6ff/0x1340 [ 1133.574161][ C0] check_panic_on_warn+0xab/0xb0 [ 1133.579128][ C0] end_report+0x108/0x150 [ 1133.583512][ C0] kasan_report+0xea/0x110 [ 1133.590130][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 1133.595878][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 1133.601657][ C0] kasan_check_range+0xef/0x190 [ 1133.606560][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 1133.612178][ C0] __usb_hcd_giveback_urb+0x217/0x5c0 [ 1133.617611][ C0] usb_hcd_giveback_urb+0x389/0x430 [ 1133.622850][ C0] dummy_timer+0x1415/0x35f0 [ 1133.627579][ C0] ? __lock_acquire+0x182f/0x5de0 [ 1133.632853][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1133.638007][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 1133.643254][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1133.648400][ C0] call_timer_fn+0x1a0/0x580 [ 1133.653114][ C0] ? timer_shutdown_sync+0x20/0x20 [ 1133.658258][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 1133.663692][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 1133.668837][ C0] __run_timers+0x764/0xb10 [ 1133.673368][ C0] ? call_timer_fn+0x580/0x580 [ 1133.678455][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1133.683674][ C0] ? sched_clock_cpu+0x6d/0x4c0 [ 1133.688563][ C0] run_timer_softirq+0x58/0xd0 [ 1133.693359][ C0] __do_softirq+0x218/0x965 [ 1133.697896][ C0] ? __lock_text_end+0x5/0x5 [ 1133.702945][ C0] irq_exit_rcu+0xb7/0x120 [ 1133.707402][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1133.713088][ C0] [ 1133.716026][ C0] [ 1133.718961][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.724962][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 1133.730287][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 97 39 b5 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 1133.749947][ C0] RSP: 0018:ffffffff8c807d70 EFLAGS: 00000246 [ 1133.756048][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a3f00ae [ 1133.764107][ C0] RDX: 0000000000000001 RSI: ffff8880132ee000 RDI: ffff8880132ee064 [ 1133.772531][ C0] RBP: ffff8880132ee064 R08: 0000000000000001 R09: ffffed1017306dbd [ 1133.780518][ C0] R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff8881412ef800 [ 1133.788675][ C0] R13: ffffffff8d6607c0 R14: 0000000000000000 R15: 0000000000000000 [ 1133.796729][ C0] ? ct_kernel_exit+0x12e/0x180 [ 1133.801632][ C0] acpi_idle_enter+0xc5/0x160 [ 1133.806361][ C0] cpuidle_enter_state+0x82/0x500 [ 1133.811447][ C0] ? mark_tsc_async_resets+0x50/0x50 [ 1133.816795][ C0] cpuidle_enter+0x4e/0xa0 [ 1133.821231][ C0] do_idle+0x315/0x3f0 [ 1133.825330][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 1133.830400][ C0] cpu_startup_entry+0x18/0x20 [ 1133.835224][ C0] rest_init+0x16f/0x2b0 [ 1133.839495][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 1133.845680][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 1133.852147][ C0] arch_call_rest_init+0x13/0x30 [ 1133.857115][ C0] start_kernel+0x39f/0x480 [ 1133.861778][ C0] x86_64_start_reservations+0x18/0x30 [ 1133.867267][ C0] x86_64_start_kernel+0xb2/0xc0 [ 1133.872236][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 1133.878773][ C0] [ 1133.882301][ C0] Kernel Offset: disabled [ 1133.886668][ C0] Rebooting in 86400 seconds..