last executing test programs: 19m26.446064148s ago: executing program 3 (id=1539): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000040)={0x10}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000240)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) 19m25.837201567s ago: executing program 3 (id=1548): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0xfffffffd, 0x8, 0x2, {0x0, @raw_data="0a3adfffd76b06b8b649e997483fe1311b3fcc94583aaa220f93540662e55f1c2ab89cf76b16a9474f6f9b079b48ae529e1a2266e6360978a2bb30abc742eccd09ca04bd13790c185bf7e7ce7bcf5608a20a64d6585649f14f61ff7f83143e49f4ebc2553837f8b3e57f95f03023290f091d39efd0be95058f203a6c6183c2544bbaaee5bd0f26852881088056f239e5cdea3047828f52d2ce2fbc28fc632254d71ed427cd9eab28c2b48709286d4c19ef15d167f81d10060d49fb238d6ab038877890843acd7806"}, 0x7fffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x10201, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TCSETA(r2, 0x802c542a, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, 0xffffffffffffffff, 0x31bf7000) 19m24.790928471s ago: executing program 3 (id=1555): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) write$dsp(r2, &(0x7f00000001c0)="d1", 0x1) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc1004110, 0x0) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x0, [{}, {0x10001}, {0x0, 0x400}, {}, {}, {}, {0x0, 0xfffffffd}], 0x10}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2"}) (async, rerun: 64) close(r1) (async, rerun: 64) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r5, 0x7b3, &(0x7f0000000040)) (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000200)=""/170, 0xaa}], 0x3, 0x3, 0xb) 19m24.494154084s ago: executing program 3 (id=1557): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x0, {0x0, 0x0, 0x0, 0x0, 0x82c}}) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYRES8=r0, @ANYRESHEX=r5], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 19m23.858215246s ago: executing program 3 (id=1560): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129e00, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) 19m22.786111905s ago: executing program 3 (id=1569): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffffffcf) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffffffcf) (async) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) 19m7.678081612s ago: executing program 32 (id=1569): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffffffcf) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffffffcf) (async) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) 18m7.416410192s ago: executing program 1 (id=2010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000300000005000000000000000000000005000000000000fdffffffffffff"]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1278, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) read(0xffffffffffffffff, &(0x7f0000002200)=""/154, 0x9a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 18m7.10872922s ago: executing program 1 (id=2014): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) (async) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) 18m6.769899702s ago: executing program 1 (id=2015): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x1ff, 0x2, 0x2, {0x3, @pix={0x1, 0x1, 0x7875631d, 0x0, 0x23b, 0x5, 0x7, 0x633, 0x0, 0x0, 0x2, 0x5}}, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, 0xfffffffffffffffe) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x545840, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x2000) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x6, 0xa3, 0x7, 0x0, 0x0, [{{r1}, 0xdba}, {{r1}, 0xfb}, {{r3}, 0x1}, {{r5}, 0x4}, {{r2}}, {{r6}, 0x1}, {{r7}}]}) r8 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x329240, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x1ff, 0x2, 0x2, {0x3, @pix={0x1, 0x1, 0x7875631d, 0x0, 0x23b, 0x5, 0x7, 0x633, 0x0, 0x0, 0x2, 0x5}}, 0x8}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, 0xfffffffffffffffe) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x545840, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x2000) (async) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x6, 0xa3, 0x7, 0x0, 0x0, [{{r1}, 0xdba}, {{r1}, 0xfb}, {{r3}, 0x1}, {{r5}, 0x4}, {{r2}}, {{r6}, 0x1}, {{r7}}]}) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x329240, 0x0) (async) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000) (async) 18m6.337179306s ago: executing program 1 (id=2018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x566afa30a48730) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000000200)=""/188) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000700)={r9, 0x0, 0x4, 0x8, 0xfa}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@any, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@host}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 18m5.513434515s ago: executing program 1 (id=2021): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20002) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xf, 0x7, 0x0, 0x0, 0x9, 0xb, 0x22, 0x3, 0x2f, 0x5, 0xe, 0x0, 0x8, 0x3, 0x4, 0x4, 0x4c, 0x5, '\x00', 0x4, 0x4}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x4, 0x9}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x1, 0x861, &(0x7f00000001c0)="3bc48c734327a54eb378a81c2f9293a86a92c4ab8471d2461879cce96be016e068aa7a12e91e3f6964bf8493cbc066285d69fbbea95e01268dc2ec5d372c5495b895a4569a5da83062147f985359d97f18dc834b12b13b871c55fcaf5c3dc778959dfb633877450561d8f1b285547de88e3a1ccb9f87d70d692eb68a90c35de8d0f1e64bc60882b9fa8cbadf814ae21510f70482c6b1cf14126c5f870a26b48691632a0759b1f41b14a93b31e97ac77e43254ffd0f91ee5e2cabc3dfc6414ba916e85081ebb198a42f13025b527037", &(0x7f00000002c0)="11647b830759aa6ab616eefcccba2537652f4a4dff48def42e4e48f873588f024954d7a3439ea1823ff3462c0b131ee61cdcc1f503fc3b1aa256c4c19891045aed86222306eb3a1c70da8029f9891b859596ea6eaee34d511208515875803a1c3e7e33d034f75bc7bbed271fb7e176757ef4ec371ecdb8905467bb03464afa11c2d1a5759c0bbcd02a953e2a64966247401712e312c98e1db26e1743e71c170e4d755060ae32e6dd2bcb7d2658bd05ec65e7cf962bf6368917202f8dd03a3d8d7c731a724f1a4d34020459605d12", 0xcf, 0xce}) 18m4.854073466s ago: executing program 1 (id=2027): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x3, 0x101, 0x7fffffff, 0xa, "633fefc4c9edffd671e3202ae0d3c571f287a7"}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x3, 0x101, 0x7fffffff, 0xa, "633fefc4c9edffd671e3202ae0d3c571f287a7"}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) 17m49.764456034s ago: executing program 33 (id=2027): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x3, 0x101, 0x7fffffff, 0xa, "633fefc4c9edffd671e3202ae0d3c571f287a7"}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x3, 0x101, 0x7fffffff, 0xa, "633fefc4c9edffd671e3202ae0d3c571f287a7"}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) 8m33.394787379s ago: executing program 2 (id=6714): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x1115c3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000500)={0x3a, 0x37, 0x12, 0x1, 0x5, 0xb8, 0x2, 0x103}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000780)="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", 0x133}, {&(0x7f0000000140)="ce903baa49", 0x5}], 0x2, 0x80000001, 0xd2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000002a82, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x17a7409d5d795614, 0x28011, r3, 0x1000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0x40046f41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000003c0)={0x4, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x2}, {0x7, 0x5, 0x0, 0x1}, {0xbad9, 0x73, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x3}]}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) r8 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) read(r8, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000200)={{@local=0x2}, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) read(r2, &(0x7f0000000000)=""/3, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000d, 0x2010, r7, 0x0) 8m33.173475706s ago: executing program 2 (id=6718): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="ade5e506aafa488863871a925ac40ce1795b9760a99d972522f464947a4923ab08fe3c3fc6a68c372ba5dd2566a3865660c6b9a3739e3a73b0ce22d2b689f359ce0817bff1ff86d46c1e9637294bf14b4395b0c2df548f3fa6317ca53fa4b246cea63492984d901167ec9bce3754e1d7a9b9dcaba82dff89ea02e6c39c4692fceda2c0a276b952d67e8db9fbd7dfb53f8f9b72a4ea529c94876de0665b34106d4efb44cba59c2aa2605f6078d36c76c80fe5876135e94f6e517e9308f04950e38b044258d191583d46c5a82a8e73a3d565614193954c1283c4e61a6e", 0xdc}, {&(0x7f0000000140)="83df", 0x2}, {&(0x7f0000000180)="d41694ee44950bda7562b08f7fc0ae09fcfc3dbc885edc79adbac6ab25d369dd764bfdb6f4a9dec48d9793cd54d1808ad80fef5d4467f0b1a16d6492e0b89363b611178a1b5afc26944f2ae8254602e0e0c7973feeb21e86f3b0f32e86398adcefdf8d067797981b647fddcf53fbd15e1d9f4c964bacbc562e", 0x79}, {&(0x7f0000000200)="909d0be5efb58660eea8a5b0229ebffbfbda12250824c78ecae0c6cb59c28bbc10d8161f70b3e71dab386385b124a77fefcc262f17e87d6cb86bfa5eec248c09f354615bd1d36f2236707140a468b5ed026f23366a74a266c40948faea", 0x5d}, {&(0x7f0000000280)="307ee06968cabd18fb2879da2cd26aeea122670332a4815ed86f9bbb80e3a037736f7c4f3fba15eef1b08d62c996b2a480b5eeb8d8de00420bb0682c0704952ba84807ff1f70e1591224cb78cbe75cd55732fa93f0e323466dc7b59c6e767ba4c4", 0x61}, {&(0x7f0000000300)="661ebeda77f30f82899cf6e64a693f2782e6a82100c38a4c5606fc3ea5baaab9a87515daa30f48327e496641d2c9befd2beb28cc430148b894145c8ab439017c596627b01e653e161a3ac5cbb928fdb58286dba854533c20f9454ac7f93719d9cb955cf233a8052c6fdf18ec83ca7b8abdab2698ecce0b190fa57d7688068c172e9ebde98b4fa324a9de6fd09ea41740b061121653b215b1e557ae83933701bb84fa86095260d8804fcca2551a0d2a88976853a81be2ec1520bece579162c4debd847a00eb926a739b352230d3e51366a1dc4f", 0xd3}], 0x6, 0xa6, 0x400, 0x3) ioctl$int_out(r0, 0x0, &(0x7f0000000480)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000004c0)=0xffffffffffffffff) lseek(r1, 0x4, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000840)={0x4, &(0x7f00000007c0)=[{0xd, 0x43, &(0x7f0000000500)="e3133e17d5edb60c9e00af07967cfe53c4a6b6e6319e398089f6ed44f48b143ba6344928a11c7521c5d55028e1b05c35c3da8b49c46c170e17e0837ecca5834c8bb4c7", 0x1}, {0x8, 0xe9, &(0x7f0000000580)="6f99ec74d0715965aab77b34089647a5d108fb3b006eaa8906f536c101bef963384fa452aa5da65d0ae04b8951e9182b3142da89b32d312c9a3b7e86ffe07e689d39c73ebd24b792dcc63af1336ce6f05797283e16853441e53a11ff860ecd12bb514bc60670c2fbeb08f669446aeb66130645dffd24f19a1307a687da5a50805a8d2c0a6d0b409dbd70a6a7f9d9a7d27127b049c0508255a11a366793334ef42a609630a18c5cfcbcf23e59e19e1f38a60444333ec50653e417973f44c304f855dd49194bbe0ecf97186c6f0fe42abe344ccbcca67f26082af84a233b5f2791a17d7a65160fc3730e", 0x1}, {0xffff, 0x70, &(0x7f0000000680)="b63e785aed85ad4242a4df68e40bd1559217f49f783d7e83f577280972d6be10de2c536ed45dbf0bcec6f4286c5f0c8cd1df1554fa1a5c7e996b4be1777f29a03c3ebcf9ef459b105bc70c7da9bcea46621772cdeb987742b63dc6c4b0cfc17a84247c820f0a9a3606f9dcba9c74f146", 0x0, 0x1}, {0x50, 0x84, &(0x7f0000000700)="9cd0cf1e5a42eaa7938b441a6ea749e01ca563e9f77e69d3c3654a378a046597d0660def51bf729efc4dc75bd124d1ea446f6f433c53f5c917eaf0bfbb71a932f2e549d9f4e039d67b25d56dce4699acd2ade18629a39acde5cdc0f1762d9d50d35af2d7b125705d721d588e4cd86ee96127ee5f6ca7a15477f9e3e472f136ceb81b0f18", 0x1}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000008c0), 0x13f, 0x6}}, 0x20) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r0, 0x3f638000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000940)={0xd40, 0xde, 0xcd4d}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000980)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000a00)={[0x1, 0x40800, 0xce, 0x7, 0x0, 0xffff, 0x1, 0xfff, 0x100000000, 0x6, 0x8000, 0x6, 0x401, 0x4, 0xffffffffffffff01, 0x7], 0x0, 0x100200}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001ac0)={&(0x7f0000000ac0)=[0x6, 0x0, 0x80, 0x8, 0x80000001, 0x3, 0x5, 0xfffffff8, 0x9, 0x1ff, 0x80000001, 0xfff, 0xffffecbc, 0x81, 0xff, 0x9, 0x4bd3, 0x9, 0x1ff, 0x5, 0x200, 0x9, 0x6, 0xa, 0x4, 0xb, 0x6, 0x6, 0x7, 0x3, 0x6, 0xf, 0x6, 0xb7eb, 0x7, 0xffffff00, 0x0, 0x0, 0x6, 0xfffffffe, 0x0, 0x6, 0x1, 0x7, 0x1, 0x6, 0x3, 0x100, 0xd, 0x5, 0x3, 0x8, 0x9, 0x0, 0x20000000, 0x80000000, 0x3, 0x8, 0xfffffffa, 0x7, 0xee, 0xf, 0x400, 0x4, 0x100, 0x0, 0x5, 0x8, 0x8, 0x0, 0x1, 0x200, 0x3, 0x80000000, 0x3, 0x4, 0x6, 0x8001, 0xffffffff, 0x400, 0x5, 0x66a0b9c8, 0x4, 0x4, 0x7f3a, 0x3, 0x10000, 0x6, 0x5, 0x8001, 0x3, 0x7, 0x3a, 0x6, 0x7, 0x9, 0xfffffe00, 0x2, 0x40, 0x7, 0xc2, 0xffffff41, 0x7, 0xfd1, 0x3, 0x2, 0x4, 0xfffffff7, 0xc, 0x9, 0x74, 0x7, 0x0, 0x9, 0x5, 0x6, 0x7, 0x0, 0x2, 0x6, 0x4423, 0x0, 0x5, 0x7, 0x1, 0x8, 0x7, 0x2, 0x7, 0x5, 0x0, 0x5, 0x3, 0xc, 0x3ff, 0x7a9, 0x4, 0x80000001, 0x1ff, 0x8, 0x80, 0x1, 0x7, 0x6, 0xfffffeff, 0x3, 0xbfe7, 0x800, 0x4, 0x8, 0x6, 0x6, 0xffff0001, 0x3, 0x1, 0x9, 0x0, 0x800, 0xda2b, 0xffffffff, 0x6, 0x2fd8, 0x0, 0xffffff93, 0x6, 0x8, 0xc07e, 0x8001, 0xba1, 0x9, 0x9, 0x5, 0x2, 0x2, 0x3ba7, 0x1, 0x3, 0x59, 0xffff, 0x7f, 0x2, 0x80000000, 0x0, 0x3, 0x1800000, 0x0, 0x0, 0xfffffffa, 0x1433, 0x0, 0x8, 0xa0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x7fff, 0x8, 0x3, 0x1, 0x6, 0xf6000000, 0x3, 0xa, 0x6, 0x2e000000, 0x8, 0x1, 0x9, 0x0, 0xfffff001, 0x8, 0x80000001, 0x1, 0x4, 0x4, 0x0, 0x2, 0x7fffffff, 0x145, 0x3, 0xfd4, 0x0, 0xb, 0x7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x6, 0x4, 0x2, 0x5, 0xf40, 0x5, 0x80000001, 0x8, 0x2, 0x3, 0xffffffc0, 0x2, 0x7, 0x6, 0x200, 0xc1, 0x1fffe00, 0x1000, 0xfff, 0x4, 0x3, 0x8, 0xeb, 0x1, 0x6, 0x6, 0x7f, 0x7, 0x401, 0xec25, 0x8001, 0xfff, 0x4, 0x0, 0x3ff, 0xbabf, 0x4, 0xa, 0x3, 0xf, 0x8001, 0x8, 0x7, 0xffffffff, 0x3, 0xc8, 0x2275f692, 0xc, 0xec, 0x5, 0x10, 0x10, 0x5, 0x3, 0x5, 0x95, 0x3, 0xc, 0x8, 0x8, 0x7fffffff, 0x4, 0x37, 0x400, 0x5, 0x1d, 0xffff, 0x8, 0x166, 0x5, 0x7, 0xfffffff8, 0xc0a8, 0x4, 0x8e, 0x6, 0x3, 0x8, 0x0, 0x3, 0xfffffffe, 0x6b, 0x9, 0x7, 0x32, 0x6, 0xa7, 0x9, 0x200, 0x9, 0x1, 0x6, 0xff, 0x0, 0x0, 0x3, 0x785c, 0x1, 0xe, 0x101, 0x8, 0x10, 0x401, 0x2, 0x0, 0x800, 0x6, 0x0, 0x0, 0x0, 0x5, 0xcbc80000, 0xcf2d, 0x4, 0x7, 0x400, 0x9, 0x4, 0x4, 0x8, 0x3, 0xb4, 0xed, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x3f6e6548, 0x5b, 0x3, 0x3, 0x0, 0x2, 0x1caf, 0x8000, 0x3, 0xdf, 0x10, 0x2, 0x1, 0x2000000, 0x9, 0x1, 0x0, 0x9, 0x8c, 0x863, 0xf, 0x10, 0xc, 0x200, 0xff, 0xfffffff9, 0x94, 0xfffffffa, 0x2, 0x1, 0x80000001, 0x400, 0x4, 0x7, 0x5, 0x6, 0x6, 0xfff, 0x9, 0xc27b, 0x6, 0x8, 0x4, 0xffffff81, 0xb, 0xffff5625, 0xea, 0x40, 0x88, 0x100, 0x3, 0x1ff, 0x3eb800, 0x7, 0x1000, 0x1, 0x3, 0x4800, 0x1, 0x100, 0x0, 0x6, 0x10000, 0x4, 0x80000001, 0x8001, 0xffffff62, 0x401, 0xfffffff3, 0x9, 0x4e75, 0x10, 0x5, 0x100, 0x1, 0x5, 0x4, 0x7, 0x7, 0x7fff, 0xc9, 0x8, 0x5, 0x9, 0xbee, 0x3, 0x4, 0x8, 0x7, 0x7, 0x0, 0x5, 0xb64, 0x389, 0x5, 0x1, 0xe, 0x4, 0x80, 0x4, 0x3, 0x80000000, 0x8, 0x3907, 0x65, 0x28a, 0x9, 0x1, 0x6, 0x5, 0xfff, 0x43b7, 0x6, 0x4, 0x4, 0x0, 0x5, 0x200, 0xfffffffa, 0x1ff, 0xa, 0xd7d, 0xfaa, 0xdf7, 0x8001, 0x6, 0x0, 0x2, 0x3, 0x3101, 0x8001, 0xf, 0x3ff, 0x625e, 0x6, 0xfffffffe, 0x7fff, 0x51, 0x4, 0x0, 0x5, 0x9, 0x2, 0x7fff, 0x1ff, 0xfffffff8, 0x8, 0x5, 0x4, 0x9d, 0xfffffffa, 0x3, 0x9, 0xfffffff9, 0x7fff, 0x3, 0x400, 0x7, 0x7fc000, 0x8, 0x9, 0xe, 0x0, 0x0, 0x6a3, 0x5, 0x6, 0x6, 0x24, 0x40, 0xffffffff, 0x10, 0x6, 0x936c, 0x3, 0x4, 0xe95, 0x3, 0xfffffffc, 0x0, 0x7, 0x8, 0x7, 0x21e6, 0x2, 0x7, 0x0, 0x4, 0x1, 0xb, 0xb, 0x4, 0x0, 0x2, 0x7, 0x6, 0x1000, 0x1, 0x4, 0xa, 0x8, 0xe602, 0x2, 0x6, 0x9, 0x9, 0x6, 0x4, 0x9, 0x8, 0x6, 0x7ff, 0x3, 0x5, 0x3, 0x5d, 0x3, 0x3, 0x3, 0x0, 0x7f, 0xffff, 0x6, 0x3, 0xfffffff7, 0x81, 0x7, 0x4, 0x5, 0xff, 0x0, 0x9, 0x1e70, 0x7f, 0x5, 0xfffffffb, 0x2ee7, 0x3, 0x2, 0x5, 0x3, 0xfffffffc, 0x4, 0xff, 0xf, 0x9, 0x7, 0x3, 0x7, 0x2, 0x7, 0x0, 0xb6a0, 0x0, 0xccde, 0x2, 0x9, 0x3, 0x8001, 0x200, 0x8, 0x2, 0x1000, 0x6, 0x3, 0x7, 0x40, 0x1, 0x5, 0x6, 0x5, 0x7, 0x4, 0x200, 0xfffffffa, 0x0, 0x10001, 0x3, 0x9, 0x4, 0x8000, 0x8000, 0x2, 0x8, 0xc, 0x3, 0x9, 0x5, 0x699c, 0x5, 0x10, 0xf, 0x3, 0x3, 0x3, 0x0, 0x40, 0x2, 0x40000000, 0x69000000, 0x0, 0x79d, 0x9, 0x3, 0x1, 0x1000, 0xe093, 0x200, 0x9, 0x400, 0x400, 0x24c12fc0, 0x32ee, 0x0, 0x59d, 0x5, 0x7, 0x1, 0x5, 0x4d73, 0xfffffffb, 0x2, 0x4, 0x27, 0x1, 0x2, 0xfff, 0x8001, 0x7, 0x7, 0x100, 0x29e47163, 0x3, 0x0, 0x3, 0x7fff, 0x6, 0x9, 0x8, 0xfffffff7, 0x200, 0x0, 0x2, 0x22e1, 0xfffffffc, 0x3, 0x3, 0x800, 0xfffffffd, 0x4, 0x200, 0x5, 0x5, 0xa, 0x5, 0x4, 0xfffffccd, 0x3, 0xa5a, 0x10001, 0x784a, 0x9, 0xa, 0x7, 0x7, 0x4, 0x478f66dd, 0x9, 0xef, 0x7be977b1, 0xa1, 0x5, 0x101, 0x7, 0x6, 0x6, 0xc, 0x2, 0xd9fc, 0x5, 0x8, 0x9, 0x2, 0x800, 0x1eb2, 0x1, 0x9, 0x2, 0xfe23, 0xbe5b, 0x400, 0xffffffff, 0xa, 0x1, 0x1, 0x5, 0x2, 0x0, 0x2, 0x6, 0x30, 0xffffff81, 0x9, 0x4, 0xa, 0x2, 0x76, 0x9, 0xc785, 0x4, 0x8, 0x200, 0x2, 0x2, 0xffffffc0, 0xc, 0x6, 0x0, 0x4250, 0x2, 0xe62d, 0x9, 0xff, 0xfff, 0x5, 0x1, 0x1, 0xd, 0x7, 0x3, 0xad6200ea, 0x1, 0x9, 0x7, 0x7, 0x10000, 0x0, 0x800, 0x38, 0x4, 0x3, 0x3, 0x9, 0xfffeffff, 0xfff, 0xf, 0x1, 0xffffffff, 0x401, 0x4, 0x1, 0x6ec, 0xf, 0x4, 0x10000, 0x5, 0x9, 0x5434119, 0xe, 0x5dc8fba4, 0x81, 0x4a, 0x8, 0x0, 0x80000000, 0x992, 0x295, 0x20, 0x7fff, 0x800, 0x4, 0xc0f, 0x7669, 0x0, 0x5, 0xcc, 0x3, 0x2, 0x0, 0xd, 0x1, 0x93a, 0x4, 0x401, 0x7, 0xb, 0x2, 0x6, 0xffff, 0x769b, 0x9, 0x5, 0x7fffffff, 0x3, 0xb1e, 0x2, 0x2, 0x400, 0x24, 0x8, 0x5, 0xe, 0x9, 0x8, 0x2, 0x4, 0x9, 0x2, 0xf14, 0xf, 0x10, 0x4, 0x6, 0x10000, 0xfbc, 0x473, 0x3, 0x1, 0x6, 0x9, 0x3, 0xc6d, 0x9, 0x9, 0x90, 0x5, 0x6, 0x5, 0xc52d, 0x4e, 0x10000, 0x0, 0x6, 0x1000, 0x9, 0x0, 0x7, 0x4, 0xfffffffd, 0x80, 0x10, 0x75, 0xfa, 0x7, 0x7, 0x9, 0x2, 0xbd00000, 0x3, 0x1000, 0x800, 0x80, 0xfff, 0x1ff, 0xffffffc0, 0x7ff, 0xfff, 0x9, 0x1, 0x5b, 0x8bc, 0x6, 0xa6, 0x0, 0x3, 0x6f, 0x2, 0x4, 0x0, 0x400, 0x20, 0xa, 0x7, 0x4, 0x5, 0x1a12d26d, 0x1, 0x8, 0x8, 0x6, 0x2, 0x9, 0x4, 0x1, 0x7, 0x9, 0x0, 0x7a, 0x557d, 0x3, 0x2b, 0x80000000, 0xc0000, 0x9, 0x6, 0x7f, 0x2, 0x8, 0x2, 0xfffffff4, 0x4, 0x9, 0x2, 0xc, 0xffff7fff, 0x0, 0x7, 0x1, 0x9, 0x0, 0x489, 0x0, 0x3, 0x2a, 0x3, 0x4, 0x2, 0x4, 0x800, 0x7, 0x5, 0x0, 0x4, 0x9, 0x8001, 0x0, 0x3, 0xffffffff, 0x7, 0x37fbd678, 0xd, 0x1, 0x0, 0x4, 0x9, 0x81, 0x101, 0x800, 0x1, 0x80000001, 0x8, 0x7, 0x7184d112, 0x6761, 0x5, 0x5, 0x10, 0x80000000, 0x400, 0x100, 0x1, 0xfff, 0x10, 0x8, 0x81, 0x9, 0x427, 0x1a, 0x8001, 0x1, 0x5ac9, 0x8, 0x100, 0x3b8d, 0x2e], 0x2, 0x400, 0x29}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000001b00)={0x8, {0x8, 0x0, 0x9}}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000001b40)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001c80)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000003cc0)={"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"}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f00000040c0)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000004140), 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000004180)=0x3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000041c0)) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004200), 0xc01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000004240)={0x1, 0x2, 'client0\x00', 0x0, "aa01982840b2d416", "9fa8817146f5ac4d8a08f42a7739cb20a61a7788b0308000aab0ffe1354cd4f1", 0xffffff7f, 0x4}) write$FUSE_STATFS(r0, &(0x7f0000004300)={0x60, 0x0, r4, {{0x6, 0x7, 0x4, 0x80000001, 0xfff, 0x0, 0x401, 0x81}}}, 0x60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000004380)={0x10000, 0x1, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 8m33.09552414s ago: executing program 2 (id=6719): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x2, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x10}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x2) read(r6, 0x0, 0x0) (async) read(r6, 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x80045006, 0x300000000000000) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r7, 0x545c, 0x0) (async) ioctl$TCSETS(r7, 0x545c, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x721400, 0x0) 8m32.809936425s ago: executing program 0 (id=6725): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0x2800, 0x30, {0xb, 0xffffffff}, 0xd0, 0x9}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) read(r2, 0x0, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) dup(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 8m32.680959802s ago: executing program 2 (id=6727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000640)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x980001, 0x0, '\x00', @p_u8=0x0}}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x7a6e, 0x4, 0xf, 0x0, 0x8, 0x9, 0x7, 0x2, 0x40000000], 0x2000, 0x8340}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 8m32.311036784s ago: executing program 0 (id=6732): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0xfd, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="5ca86304000000f0099af29e96c8d42bd451039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c3982a819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100"/253, 0x0, 0xfffffffd, 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180), 0x0, 0x39, 0x0, 0x0, r5}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x40087543, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000030c0), 0x488000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r11, r12, 0x93, 0x8, 0x9, 0x80, {0x8, 0x0, 0x3, 0x4, 0x4, 0x5, 0xe, 0x3, 0x6, 0x3a, 0x4, 0x7, 0x5, 0xff, "e277757ff8f6376a2bea41916e6b67ed3b8680c42ded88c143ad5fd3d8c7ff15"}}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r7, 0x9af000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 8m32.305342429s ago: executing program 2 (id=6733): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000, 0x41c000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x3, 0x3, 0x9, 0x0, 0x4000003, 0x9, 0x2, 0x3, 0x3, 0x0, 0x1, 0x9, 0x0, 0x40, 0xbc, 0xc, 0xb7, 0x3, 0x3, '\x00', 0xb, 0x1800010000000000}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 8m31.957930206s ago: executing program 2 (id=6735): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000800), 0x424200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/resume', 0x141a82, 0x1b4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0xfff9, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff, r2, 0x2}}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000680)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000cc0)=""/4096, 0x1000, 0x5, 0x247, 0x3, 0x7f, 0x5}}, 0x120) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x2, 0x11, 0x800010, 0x104, &(0x7f00000000c0)="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"}) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @irqchip={0x200}}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r9, &(0x7f0000000100)=""/27, 0x1b) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r10, &(0x7f0000000000)=[{&(0x7f0000000100)="506c66b5e775fc8e", 0x8}, {&(0x7f0000000200)="a3d1d8", 0x3}, {&(0x7f00000002c0)="aaffa6", 0x3}], 0x3, 0xfffffc01, 0x5, 0x8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000005c0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 8m31.370448425s ago: executing program 0 (id=6737): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x981840) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0xa, 0x14, [0x6, 0xb, 0x9, 0xa8, 0x3]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x2000007, 0x22010, r0, 0xc9f78000) 8m31.128431404s ago: executing program 0 (id=6739): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000540)={0x6, @win={{0xff73, 0x9, 0xed, 0x5}, 0x4, 0x4, &(0x7f0000000240)={{0xe, 0x80, 0x4}, &(0x7f0000000200)={{0x2, 0x4, 0x8b, 0xffff8000}, &(0x7f0000000180)={{0x4, 0xc, 0x9, 0x6}}}}, 0x2, &(0x7f00000004c0)="d20d0b377dd52bb09afd0d1ca136e51cf569bb16a404b4b7213617daddff296ef0b103d99728e9fee8a5e6f5b2a7b8bfc16dabc37b68cccdd13ed98c5a3d065a17b612"}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeec, 0x8031, 0xffffffffffffffff, 0x4000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) read(r2, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x700, 0x12) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x7, 0x103, 0x4, {0x3, 0x9, 0x2, 0x4}}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000440)=0xe) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000640), 0x6, 0x161000) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x9}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r8, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000140)=0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400480, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r9, 0x80000000, 0x1) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) close(0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x200, 0x40) 8m30.74636987s ago: executing program 5 (id=6743): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x8}}, './file0\x00'}) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) (async, rerun: 32) ioctl$TCXONC(r0, 0x540a, 0x3) (rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"b8f7049ff4215936094ae580c1c98148", 0x0, 0x0, {0x27, 0x9}, {0x4, 0x2b}, 0x1ff, [0xc70, 0xfa9f, 0x8, 0x3, 0x3ff, 0x2, 0x4, 0x9, 0x8, 0x5, 0x6, 0x6f69, 0x8, 0x7, 0x20ab, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r0}, r1, 0x1e, @unused=[0x2, 0x3, 0x3, 0xfffffffffffffff7], @name="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"}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x208200, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f0000001240)={&(0x7f0000001200)=""/36, 0x24}) (async, rerun: 32) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000001280)) (rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0), 0x208200, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000001300)) (async) write$UHID_INPUT(r0, &(0x7f0000001380)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f00000023c0)={0x8, "ba33a698fe8793883b3f41c35638290eeb72d2c393c79c8656e90e1511fa9455", 0x2}) (rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000002400)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000024c0)={0x9f0000, 0x5, 0x4, r5, 0x0, &(0x7f0000002480)={0x9a091c, 0x3, '\x00', @p_u32=&(0x7f0000002440)=0x1}}) write$UHID_INPUT(r0, &(0x7f0000002500)={0x8, {"6e1947293837cde389c355662340464316d9629f2f36e81cd1d37b1ff6546cbded354d75beb589a289bff57940d49a31e601aed214ad261924c5bf908cdd5ac79156614a1b94a1924e27c54962d56debce82acb618ed5bec87e930a90dec03f64ec240b5a9574885f36d0568909374ca66f0d9b4c3e44a1e39ea906377792ba41716cc70f35a2947444d15cadbbe43555a246d7539d448dfb8e12d9780f60ca9dce0827bff7ad5604e284e5965a7747c397d0fbccf5db0230ea3fe6a1fb15ff39f633521539e3239b154cda7be68dd4c750042ce467f2bf4c2a45903e795b232c57c3d63fcd15e2db2ee3a91e62f6fefd42859ffcf6ba652d46ae98e9a2cb6131cdc1913733ef3786fa91dde12cb05de2ef8d9d0f168e894507a150287629a3b11c759b0e455056f535e82bfe9b994278259df4cc949126b3f5c6e2dc90aceb5c1b64632d9d22f43436fcb38bff5763201a626894846d601e829047280037a242b25cf32e1ba1d2ebfee2cc63d54b766b70970c246de6e44694596e7bca2460dc9154ccfe65947948e44ef6d9fe56e4f136e18cfa61c423c6b5ab6eb4829b384a5111c4af2057640c2acc5372a00d68776b1b499a11906ae957c32fee4c8588385fe1ac6611ea7d86ab8a9a87670c5e1e603092f6b198156bf95ba1e82e07c02f47a6286337ba3501d626e5638037044fea4f5f796a3695cb5467676d027f2c627fd374472a12f391a70f14078a942c70eb0329bb1ad50f4690c9b375d945b83ef249eaffa6ba135cc74a56484c18ce4523099f455777c987209dc5277c402acb7f6466dd2bdefe7adb1c7c9dfd0b8b2e89c3642f306c31c6a6a3bd3ee978ce44b48cf5ec016295fc43e9027b3c74691fd8ec4ff68c9d7ee013b0d221aa911a49b047e2e78cf80f8035ebed7bb56d32c0f78e7607d0d726b5a4dd47c4bfaadffa674b8336447ae916330a318c0b515820751c834374df2fd2af355d3232df62549b7675df1ea9ef91b9be5c2925892be735eb3deaaac3ce0c3fa1c2122a215dcf7b274fc8a9560c5a4d46096ddc636d72761ef9c5b7b5b5c314bf9ee4c45ad4d258020f5726c04b784049fdb1d44a42c4336ba06a222c43ddc18db11f1d79ce22b44d2863ae4e7014836b35aa03be1d18332f3e42f266063d925778df936f35261909396c5b3a42e86ad9bc281e7b3d6d511f515d97810c351974062f595e4d48f02afaa81e77e33c687484e9ef476badc2519c0c6a8aa7adada40178a4d035758573fa9556e382a4d84faf7dcafd194fe7a5148778b3bc055728b87e1890c95e356abc033ac50b5db25869372c12caea5ccfd017a3b4897ba68a3241c3bda41a8d783aaef547cb1ec57b99328db93ae2eb979ae3b602e073eb182a165d8665cd3bf2e9938f241cb25b268bc0790f1294a10821a19ccd2cb205ac0a8c0904adbe943abe2a1d1bc1d08f78324ef23cc23ffd91ac20e781a9a34b70283a475c8292b5efd1c244afb2ff686c15282b6b883e534733e9fbc3aa6970355363a1d3ed54ce6b92660d3767ec5477baf916a7bf2f756882a392f0f5a75fc236cea74addad40c5668b708b22a3443d7b80b385df285c29d6158d2dce83f61bfa6e2fa7765df7bd5142c67dd77ee803ec5d816325688f14b9420d106ab3429d672bcdf5b888a45e823056772e8721c3b6b58993cf4311a999fc6f6c8ba1f16f9752bfea678f6742abd17a39b0dd64b8f56eb62cdd7cf6cd6ec73c6437decfa7ad33d3a7f2eb3ade8f27dbc583266fd883df7390576d5ba1faba7aa5e9c18f92fb3b6b48f979d0343e762c75e35fbc373815ed513512db178e23093cfe7115ecba751e54815da66360bacad723535197a95dc36333b88de3ca8c9612bbe2913a8e3f49793b0365a31fdd30082de7bf79932fc71f466363c8214a2bb2fa8c9bf36c7f43eb7a072174bfa963ee6945e14d840b18fa0f1118f12f88a7c468f430f55c88fa81a88365748d8463fd4241ef3bb5fe2c3cbfb97d25f043a8ccbb69c650e38fccc6893e61c881147c5008c58d0ec58596fb5309a805bc19c162bc47fb27e31003c6dcbf6e1c41a86452a8e4268659769a1b8839e0f35f166c21d75e716631aa4eeba252f0e162c5aacf19002e7f156830ece7ea904f5607db87dada4f2856ac704cee9cc807b5257f76039c29e8ca175e36334649b05be22aa5f189e9fe78fbc3816bb28b15c6737ac44bb3ecaf1f382e49477cf5414726cdab5b0e7b8bbdf6d439307fab678749a0a2c507191cfaf73e5c0dec0b9744acaa5cba2393ba059c3464ddeaae11e23e55fd937a04ce325ebc062b67a8dda5a73b0d81b4b61987cb579b8cc4f0eab374385ab3d160461d77f482b00bca995e89480e66b287429f57c219817e150f8c0d8b10a91fe18159fa378be5fea6f46c140571f75897c3cd7cd074a8a3cf0e812c94f415f07576a89695d2ef38d94431dec632d69f0010f4791e00797fe7323615843390cf626dc3b30d64442177aa236fd615826bad859ad35de9759c39127fbc7efa1efc9df5ddd0304f80003651f424920b28050bb14b89f1c5b59a98e591d61bdb835642df5d3f18a10e628ff9ecf2e7a2a31b5b89e2e2d02134724b747922fc40c1cae6ff6b31873b968c219611f1ff9a64549a0458564027d5ee204a0d61228dbc765acbcff2ed7987a9022c44fb7b446eb956bf3350b33d63c1db0998608e5e60e35c5f675b3e9b440aa8cb774986e43d450bee7566e13f8625aeea768e9165f6163c1a726677187cf5363659b7c0759d35035e00ade5a1931773669dc0027eb7d8a61bcee666ef85b1a4fe9728e10df856e5d20fa3184e6644ad66c8a5dc0884c5cab60f20b5cdc9f695e785eed24fad672055ed808996a2b5f9f8ceafbfeedb0f6a631b21deb0f31d91e52c411f2b421a148105e1a71cfefe2c87fa68773aff4e9b5527d59589ff969de7fbfe07f339f4cc74799c2abaf3ff53e2bf97c1f0a2c18a70f213dfc80bd4b1917c54bac72b10e34dabeb7e75c85e83d6cb917803269e4d642bb68c737e1fae8c2c381714179664d3b79384593c02cec8afbfcfc7084b5875f761a9faba59132230561be96cdc6f0a564b846f0aef72301517fc5beb4661f6e5b3c2ff2b81bcf38710eb5b8989c041a6a6db44f31b072874afa563efa20345acbcb401193be5191dc8dd94337df22de72671f3a486ac6872cf83a4df58ad0349f425d84a20edfbf010a432cb0c086a1dd13a474bdf0621e500ff8b5f8ee87a50150c6f9559aa561cd411a74762c337efeb967764c21c2311c145351bc780cd17abb48645d8326e56c09b4dd9ff5f9fde45e60ef9d6d8d40d803198b2ac52803787007eec6ba9874285ad546c40571554500d455444e7315deb5ec9c3b906b12ddc2b0e760eb0880b5d9c9018224f88ee1d7c421e070530524813aa7a5a75c202c03492bbbbfcbbcb876262d253d53b58c782de6cf5dd8c452ca6eda443dbda4bed871afb2c85842204a260a0855aca5d35db98dd4bcbca64a9aea7c1e4459034942052edf5375c23fff4141d465146966ffa17d2f4358d899c273e778fcd598915b1c5fe4d4213b1f9a3b0e9db47226a2b33abfdf90b548a8176aa48f7167ad084e9a73c82155fe9a5868cb062dcf92835c69f7718b048261f42c98fed8e922e46cb2c2919c0a35c02df3d8c019980703fea2adae34f0b0422c91013a4a56eb08413aff59fbe6eb2efdfdf0fd2f24010b12da324e664782702748853d6b3724723010052f63a13826d1690e3e84a1c92c4f929fc9296bae072989bdea387775e83a77be8abef013e5a3b5d9f46deff5e3d8b38921faebc439d8815345cc4c75f388f9ea32e9749e10ff3c1fe879177b5ba534f798f0351259a17d8feede97680e9b949b87bc7f7f27bcdc63e36b7fd33c8ed5c65bccde71be3b6fc5f65bc58a8305aa470f61675e3a585840ae69a23950d84cca5707d572bae559f075bd23cd62d1a5f3dbafc927575dd00340948bd21abc9ecc233ba99ff9f09662ec3b889a5dc36efcb6c31ce1103a37637721b65b8903a6fa2d5723362dfa7ae963914d384a618344bc8ef3f1bb865941c1c1ec34ffacb5f8efbc1936fa26b2f6df85d42651d20c2fcdf4c714c38b9bbfb271e935dedaa75c26f195be4c7a2325864b551b8575b4f022ef0fd7b7bc0629b3e4355bd4492a142b17ffc816ff2fdf9f1c706865eac77a43b96f141f0e1e4559b6229176c7de3d39a5fe5353fd9b78b0548bf53e0c8d95e3a070eaec22a2ffb3e66d793fd2bc740bdbc2a3006163810b3f8cacd685ba9186268896e7e56895024a115103b1ec7aa4e826b928a9329d7e6b0d6111c287fe93af4af6bde0ef62452262f62a1c5f7ab0975513c241daee479a98d4141feb7e2099fde89f3a326bc800a5ee9aff419d400f9cb6a38322b0604db948b6a5638bcf4e9243d16809189dd5b8f0eb852063d572d79b08252ae8b2296ef4839a1f7e1944bab48e63f2b924ae175883bbca7dbbd1772909f02399979c93cea2909d38f9312655eb3f53e33e1e52591a2722632413a0520448bd40740ad03d9c0e48831011022dc514f02d0fc41d7b7a401d15e08b3bdf3b67945bb190db95c286cd0da1dadd2524bc0bd9fc511eb844d1ab57be4e4e781475e08d382b5c56b3b7904733fbeea746b53b57effa356f858a0edb8b71eac16e6838ae624fbf04dafc9c1f63188636b864c91a1695e7690646b920efc8c1a4983a70de40dc8a7091bfb8e7372f177ccf9ea5bd59c76dd463eae6464afe0abb240eff28c68d8b29f4444650ffa76dd60efbc4d01903860a200270ba93a5c14d282b597fd5c0a21bc29078fc129f992ef8d8286b7d3efb88b0216643b9c2e4b3a525c5def4ac49741cf2b88140d7b2876441549bbb4ef71cd2498bca901c6853506628b6758b569dba9e6cdef117045bd85d897f01603ecfea520638402948fd53780acfb2e4eb6f4d866fea0aa79fff6bd62647cd9bc6b96f69e3f4ff36992a9f47e19124526da32df8c1ce46cd2606341a9e93726d86309fddcbbc5e32c405a77695db745f629a5a4c045294fa850acf8dae916484e036ccb839d5c4616cd93354dc796fa28a267594dc9cc060b3adc73a3a23c5ae55ca434d34c3c2f9d218de3320b0fde574445a1d7b6c6cd394f1a08ca40273d8df8edae1beeb38256196804198423c276498cca801046add9c7e2d188d9ea138b7cd37210a299467b25c70d2c67005151210a89ba087dcb6ab84eed7918edf999be3745d8ff990dc8e550b86f1b5e87596aec236d45a18225f39bc5a7fc68c2d7c4222db014250c9b20c8102463ca86f54c16a0ad0207dfbded76045312e7ec93c6e2b18032abc81d1a9f08e70bee3606a68490ca2dc25258c8469f32b20b077ab87cb4f5be5e1e61f2b4ff25b139d42ab233fe761dbce615f8a1997a3a4a092dbddda7762e4ded0dac17164e960223f19a2bc99c6dbb0a28690953f2ed9cb8d5acff721eb9beb0fd8c723a7c8724f22040981d39567bfb1a119ce1a8b0faa3255f9ce69f906de5795035ad93a065133dcb98a77002104be5c1afa495bafd724916bdf85c8f1cc2c8234b99df6ce7b2ba9498cef084158abe482fa1590203873ea76fa8ee2eb85e772cf93ee00571c6ac29027baad8fa1feb39d51cf560bb86f7fb6b133f06800d96f886516da54872f483ed29bd714e1eaf8abe5a96ec37aa3f805e3d04d8ae362af83fd262325dac73e5860e49944026e0835ea452a2c0cdb7d3cb1d5d632f9", 0x1000}}, 0x1006) (async, rerun: 32) close(r2) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000003540)) (async, rerun: 32) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f00000035c0)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000003580)=0x1}) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, &(0x7f0000003640)={&(0x7f0000003600)=""/25, 0x19}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000003680)={0x3, 0x1ed95c1e}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000003700)={0xf00000000, 0x10, '\x00', 0x0, &(0x7f00000036c0)=[0x0, 0x0]}) (async) r6 = openat$cgroup_subtree(r3, &(0x7f0000003740), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000003780)={[{0x2d, 'cpuset'}, {0x6, 'rlimit'}]}, 0x10) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000003880)={&(0x7f00000037c0)=""/151, 0x97}) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000038c0)={0x2, 0x1, 0x5, 0x1, 0x4}) (rerun: 64) 8m30.542065815s ago: executing program 5 (id=6744): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r1, 0x8924, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0xc0185500, &(0x7f0000000040)={0x0, 0x100000, "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"}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0xffeffffb, 0x1008) 8m30.257325836s ago: executing program 5 (id=6747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 8m30.041106865s ago: executing program 0 (id=6749): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd}}, './file0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r1}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000140)) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x0, 0x1, 0x10, 0x40000000, '/proc/diskstats\x00'}, {0x2, 0x8f, 0x1, 0x1, '{'}, {0x2, 0x4, 0x2, 0xfe, '[]'}, {0x4, 0x5, 0xf, 0x6, '/dev/dlm_plock\x00'}]}, 0xa0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000002280)) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000022c0), 0x3, 0x0) write$dsp(r4, &(0x7f0000002300)="5db01899839a724a9e5361890e8fa2fbbc1869e177893af24901a036f9c20539f5a56de1b3be79825c2ffbd524898d17ec2409ebecf7f48bb18045a90c9cd568194bd12872fc905e432df7496e575c8d609f4d08e45f6a37bdbf05a204f225c60f974ee3eaedc839762b90d4c093e2836a2d29ae4b50fd9d025316eb274bfd45abce353572030a50a7b813042b240482b981bb4208040d", 0x97) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000002400)={0x30, 0x5, 0x0, {0x0, 0x4, 0x80000000, 0x8}}, 0x30) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000002580)={r6, 0x5, &(0x7f00000024c0)=[0xfff9, 0x2, 0x5, 0x1ff, 0xdc], &(0x7f0000002500)=[0xfe38, 0x6, 0x401, 0x6, 0xfff9], &(0x7f0000002540)=[0x4, 0x80, 0x7]}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000025c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000002600)={0x2}) pwritev(r0, &(0x7f0000002980)=[{&(0x7f0000002640)="d27aea1c05adcb10328c9a2a8feab9203b3828c76b4beaaf240e9337ba5c9c38a21052d320529bf92320d97730eb567763d22f4222bb375a0d26d903f6e6d245fc1776999eaa3e3bb500666c37f409a4e91cd12b11c7b6a880551d9a7e7dd1d8ff5dea79a7047c5c709d2654868139d8ae9eebf18bf1c3b01a58d019fdf905e329c347b3bf3221eee20cd8e200829914ab03ea7ef56c87d2abbf536ce5b7500f544aaaa7fc15fd1b42c2f8eeb983fa987d3ade8fcd4dc4e524bd859a3de50066929e17b31c07b26d98f57a0b2aa3cbce7216514d773c0a96", 0xd8}, {&(0x7f0000002740)="4907fb65cf8813f4d5d7670d7a91641e911f311ff6d0c081b85d5af69314cfaedfde3848cfdbbebf0400dc1900c2e5796b58", 0x32}, {&(0x7f0000002780)="11c71f58feb96b45928fbc96ffb3744637275c31b25843df3bd58fd8e1c6f871a1bc5b24fc934f2c58674dd0c09e43b304c3717d4a061aa192cbe5dea6fbd9f70c0caec57d899707742c2cf641f887eb275349fbda5d17b34582a93385a6c9cf1daa2c1fae190787ad17563958b2a53e5a68", 0x72}, {&(0x7f0000002800)="93f5d06f5813f354cc4ee7f6797d16a2ca0da3abf820018f921f495260d195e2119454d164cbf59c9c5e9c8810a993a78b7135", 0x33}, {&(0x7f0000002840)="501669e19269998a6fea2880ef6aa95cc038b7cc2aac07cb5ee6a2e0b6b86c997ecc8a3ce62efcaf2fcf6527a989378144a9dc7db148c4182a4958754c7069e402978b17ec308a2e07279fc9ede7ba2832f1f7c30929b57ea172bc1269505e8f198048da88ab8870d6eba2f7aa06233d6ebefa4562ed7df4fbb93aac73a05736962455005b42428032801d5d8086d6bc778a", 0x92}, {&(0x7f0000002900)="5a9fe2d60d10d6b6195dedea0b13d3ab71f628b4724999ca930f57bce1fa18c2244f1ab546c50c3cc2d8ba638f22de6bdf707e4c724a132ba8878e8624af29081089aa4261", 0x45}], 0x6, 0x4, 0x7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002a00), 0x80002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000002a40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000002b40)={0x28, 0x0, r8, 0x47, &(0x7f0000002ac0)=""/71}) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002b80), 0x4c8401, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, r9, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000004c00)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0x478ea000) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004c40), 0x92480, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f0000004c80)={0xc}) openat$incfs(r0, &(0x7f0000004cc0)='.pending_reads\x00', 0x109000, 0x51) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000004d00)={0x3, 0x1, "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"}) 8m29.940441828s ago: executing program 5 (id=6750): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x8040) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/253) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 8m29.88974989s ago: executing program 0 (id=6751): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x32400, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x6, 0x6, {}, {0xee01}, 0x63e0, 0xc3b5}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) read(r3, &(0x7f0000000140)=""/46, 0x2e) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000180)) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000005c0)={0x4, 0x0, 0x1, "13e6d70a2a2f6ff0ebddf9d79d848ef772f0b32d6977fb10900bec11c0069ddf"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x5, 0x1, 0x1, 0x0, 0xfb}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000640)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000a80)={r5, 0xc7b5, 0x2}) (async) close(0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x810, r0, 0x3b399000) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000e80), 0x80100, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x4400, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000f00), 0x8000000000000001, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000002f80)={'\x00', 0x5, 0x6, 0x6, 0x3, 0xdaf, r8}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000003040)={0x2, 0x0, [{0x48a, 0x0, 0x100}, {0x391, 0x0, 0x3}]}) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000030c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000003100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib={0x1b, 0x2, 0x2830, {"a4e349137d403ed9efc4ac6b5ac98f33"}, 0xffffffff, 0x8, 0x1}}}, 0x90) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, r6, 0xf480c000) (async) ioctl$KDDISABIO(r2, 0x4b37) (async, rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000031c0)={[0x10000, 0x4, 0x4, 0x3b9, 0x0, 0x3, 0x7, 0x2ad4237c, 0x8, 0x10000, 0x7, 0x40, 0x6, 0xa55, 0x7ff, 0x9], 0xeeeeb004, 0x2}) (rerun: 64) 8m29.725646331s ago: executing program 5 (id=6753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = dup(r3) write$vhost_msg(r4, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x2) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8}) close(r5) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a19, 0x4010, r1, 0x7dfff000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) dup(r3) (async) write$vhost_msg(r4, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) (async) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x2) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8}) (async) close(r5) (async) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a19, 0x4010, r1, 0x7dfff000) (async) 8m29.472696356s ago: executing program 5 (id=6754): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x4f) (async, rerun: 64) read(r0, &(0x7f0000000100)=""/155, 0x9b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 8m16.356165534s ago: executing program 34 (id=6735): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000800), 0x424200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/resume', 0x141a82, 0x1b4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0xfff9, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff, r2, 0x2}}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000680)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000cc0)=""/4096, 0x1000, 0x5, 0x247, 0x3, 0x7f, 0x5}}, 0x120) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x2, 0x11, 0x800010, 0x104, &(0x7f00000000c0)="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"}) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @irqchip={0x200}}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r9, &(0x7f0000000100)=""/27, 0x1b) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r10, &(0x7f0000000000)=[{&(0x7f0000000100)="506c66b5e775fc8e", 0x8}, {&(0x7f0000000200)="a3d1d8", 0x3}, {&(0x7f00000002c0)="aaffa6", 0x3}], 0x3, 0xfffffc01, 0x5, 0x8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000005c0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 8m14.489660309s ago: executing program 35 (id=6751): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x32400, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x6, 0x6, {}, {0xee01}, 0x63e0, 0xc3b5}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) read(r3, &(0x7f0000000140)=""/46, 0x2e) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000180)) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000005c0)={0x4, 0x0, 0x1, "13e6d70a2a2f6ff0ebddf9d79d848ef772f0b32d6977fb10900bec11c0069ddf"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x5, 0x1, 0x1, 0x0, 0xfb}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000640)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000a80)={r5, 0xc7b5, 0x2}) (async) close(0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x810, r0, 0x3b399000) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000e80), 0x80100, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x4400, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000f00), 0x8000000000000001, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000002f80)={'\x00', 0x5, 0x6, 0x6, 0x3, 0xdaf, r8}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000003040)={0x2, 0x0, [{0x48a, 0x0, 0x100}, {0x391, 0x0, 0x3}]}) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000030c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000003100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib={0x1b, 0x2, 0x2830, {"a4e349137d403ed9efc4ac6b5ac98f33"}, 0xffffffff, 0x8, 0x1}}}, 0x90) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, r6, 0xf480c000) (async) ioctl$KDDISABIO(r2, 0x4b37) (async, rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000031c0)={[0x10000, 0x4, 0x4, 0x3b9, 0x0, 0x3, 0x7, 0x2ad4237c, 0x8, 0x10000, 0x7, 0x40, 0x6, 0xa55, 0x7ff, 0x9], 0xeeeeb004, 0x2}) (rerun: 64) 8m14.320566423s ago: executing program 36 (id=6754): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x4f) (async, rerun: 64) read(r0, &(0x7f0000000100)=""/155, 0x9b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1m53.806206634s ago: executing program 4 (id=9476): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r2, 0x0, 0x4, 0xd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r2, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0x500000000000000, 0xf}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123a81, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000040)={0x8, r3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1m53.563664832s ago: executing program 4 (id=9477): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x14882) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x8}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)={0x1, 0x0, [{0x400000b5, 0x0, 0x3}]}) read$FUSE(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x1802, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 1m53.087859241s ago: executing program 4 (id=9482): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async, rerun: 32) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r2, 0xc0105502, &(0x7f0000000000)={{}, 0x2, 0x0, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (rerun: 64) 1m52.842142562s ago: executing program 4 (id=9486): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000006c0)={0xffff, 0x1, 0x1a4c, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000700)={r7}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="44a533b319f751948467a448bb9ac79e0108000e02000000b114a68b1ae608a5cf4dfb0056fc883b537239498728c7e9a4ff5f1d3a3437d86e557954a585bd5fcb5db1b8087b526b8cf7051b8d67d405aaec38fe393be877b8e2c956950c473671d8ea0db32a8ad32997504b33e23232b4ddbe31710508ce195a986333d10708fcb1a5a4fef7cf85dac26997915ab81e9ad4dd5c154a249818d62939d2c5d33cd47b67f31d32c3b313ea16ee5dac5dac61e9888a713261698d4a06f4a30a02691e9533ec48c04e333e88745b5ea8239202e78b54bc"]) r10 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r10, 0x1265, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x2, 0x2, 0x1, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c10f6e4c36c800def96015e0a6c2cbfcca0ad015a893ec00347f41be5a08", [0x4, 0xa7]}) read(r0, &(0x7f0000000100)=""/142, 0x8e) 1m52.677357681s ago: executing program 4 (id=9489): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xffffe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f00000000c0)) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045009, &(0x7f0000000300)) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = dup(r8) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r10, 0x8040451a, 0xffffffffffffffff) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0x2, 0x3, 0x101, 0x7fffffff, 0xa, "633fefc4c9edffd671e3202ae0d3c571f287a7"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x0, "e0ffff13000000000000000000000000000000100000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0383e04, &(0x7f0000000100)={"41984db90bbc29bffd6f85172ee82ceb2cb2ec10cfba27a8770f156fee9de10f", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r12, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_GETBLKSIZE(r12, 0xc0045004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1m51.724221025s ago: executing program 4 (id=9495): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000200)={0x3, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f00000001c0)={0x8, 0xf3}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1m36.451352099s ago: executing program 37 (id=9495): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000200)={0x3, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f00000001c0)={0x8, 0xf3}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 29.866075079s ago: executing program 8 (id=10125): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000200)={0x8, 0x4c47504a, 0x1, 0x9, 0x3, @discrete={0x2, 0x20}}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x5fff, 0x80600}) 29.451308551s ago: executing program 8 (id=10128): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x80, 0x0, 0x0, 0x10, 0x0, {0x8000}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x200}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 28.608857092s ago: executing program 8 (id=10135): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x18001, 0x0) read$fb(r2, &(0x7f00000001c0)=""/74, 0x4a) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 28.182041204s ago: executing program 8 (id=10139): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x13, 0x14, "1271a2ab78fce00d9668dda1af1ea89d62b7080a01000000000300008a03000000000000000000ffffff7f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4]}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r2, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) openat$kvm(0x0, &(0x7f00000001c0), 0x612103, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x612103, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) close(r6) close(0x5) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r3, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$sndctrl(&(0x7f0000002380), 0x1, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000002380), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000002400)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000002400)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 27.823720444s ago: executing program 8 (id=10141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x11, r1, 0x7dfff000) 27.47411269s ago: executing program 8 (id=10145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x3, 0xfffffffffffffff7, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) read(r0, &(0x7f0000000100)=""/150, 0x96) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 20.738984082s ago: executing program 7 (id=10198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) close(r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffd, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) read(r3, &(0x7f0000001280)=""/151, 0x97) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xbe90615000000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80000) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[], 0x8c) close(r4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x26782, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008004"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(r1, 0x0, 0x0, 0xfffffffb, 0x7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2e, 0x10, 0x3, 0x5, 0xfb, 0x0, 0xf, 0x7, 0x7, 0x0, 0x23, 0x5, 0x94, 0x5, 0x9}}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, 0xffffffffffffffff, 0x7dfff000) 20.183899943s ago: executing program 7 (id=10201): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0xb, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 19.480587096s ago: executing program 7 (id=10206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000014c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x10a}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x1, 0x24}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='w'}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400, {0x0, 0x3, 0x7ff, 0x0, 0x7d, 0x4a7c}}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x10, r4, 0x7dfff000) 19.326119965s ago: executing program 7 (id=10208): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x5, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x8, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0xff, 0x7d}}) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0xc, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r5, r4) (async) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x10001) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r4, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000080)) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 19.076115642s ago: executing program 7 (id=10210): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f00000000c0)=""/111, 0x6f}], 0x3, 0xffeffffb, 0x1007) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x45000) 18.934561361s ago: executing program 7 (id=10212): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000000)={0x980000, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u8=0x0}}) r6 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000140)={r9, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.314088809s ago: executing program 9 (id=10222): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x7fffffff, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x5}) read$FUSE(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.088948667s ago: executing program 6 (id=10223): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x8, 0x1, 0x0, {0xfffff8a5, 0xfffffffe}, 0x5, 0x296}) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000001280)=0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000100)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000001200)={&(0x7f0000000200)=[0xfffff93a, 0x4, 0x7fff, 0xfffffffc, 0x5e976510, 0xa0, 0x3, 0xc4, 0x10000, 0x2, 0x5, 0x8, 0x2, 0x6, 0x77a, 0xf306, 0xf, 0x4, 0x8, 0x5, 0x3, 0x7, 0x40, 0x8, 0xff, 0x8, 0x3, 0x7, 0x7, 0xfffffffe, 0x4, 0x0, 0x6b3, 0x1, 0x800, 0x6, 0x280000, 0x7, 0xa, 0x10, 0x3, 0x2000000, 0x9, 0x4, 0x6, 0x1ff, 0x9, 0x40, 0xfffffe01, 0x2, 0xd77, 0x0, 0x7, 0x2, 0x4800, 0xff, 0x6, 0x6, 0x4, 0x3, 0x4, 0x6, 0x80000000, 0xbc4, 0x10000, 0x7, 0x4, 0xfffe, 0x7, 0xfffffff8, 0x3, 0x6, 0x6, 0xffffff39, 0xd0, 0x10, 0x4, 0x3, 0x10000, 0xffff, 0x7, 0x8, 0xc8ab, 0x10000, 0x1, 0xfffffff9, 0x2, 0x9, 0x2b, 0x400, 0x4, 0x43, 0x1b, 0x1, 0x7, 0x7, 0x10001, 0xffff85b7, 0x8, 0x64, 0xfffffffc, 0x400, 0x2, 0xfffffff5, 0x36f, 0x1000, 0xc9, 0x5, 0x0, 0xffff7fff, 0x8, 0x4, 0x8, 0xffff105d, 0x81, 0x0, 0x5, 0xec, 0x100, 0x4, 0x8, 0xffffc48d, 0x1d0, 0x8, 0x7, 0x131, 0x2, 0x8b0, 0x9, 0x9, 0x3ff, 0x10000, 0xfffffffe, 0xb159f122, 0x734, 0x7, 0xfffffada, 0x5dac, 0x1, 0x6, 0x7, 0xffffff0a, 0x0, 0x7, 0x200, 0xd6, 0x9, 0xffffffc0, 0x10001, 0x0, 0x609c, 0xfffffffc, 0x9, 0x401, 0x91, 0x2, 0x7, 0x7f, 0x1, 0xf4, 0x4, 0x7, 0x9, 0x4, 0xba41, 0x1, 0x2, 0x10, 0xffff036b, 0x1, 0x6, 0x1, 0x200, 0x6, 0xe9fa, 0x7cf, 0x769, 0x5, 0x81, 0x9, 0x4, 0x0, 0x7, 0x6, 0x8, 0x0, 0x9, 0x2, 0x4, 0x7, 0x6000, 0xeaa, 0xfffffffc, 0x8, 0x7, 0x6, 0x6, 0x7, 0x4, 0x9, 0x5, 0xd7, 0x5bd, 0x3, 0x0, 0x10, 0xb, 0x5, 0x4, 0x6, 0x4, 0x41, 0x9, 0x1000, 0x10000, 0xff, 0x256c, 0xfb0, 0xf, 0x53, 0x5, 0x2, 0x7fff, 0x81, 0x8, 0x7f, 0x0, 0xcb, 0x6, 0xfff, 0x3, 0x9, 0x12, 0xe, 0x1, 0x1000, 0x3, 0x10, 0x5, 0x8, 0x3, 0x6, 0xfffffffc, 0x10001, 0x6, 0x9, 0x1, 0x9, 0x8, 0x2, 0x2, 0x200, 0x690c, 0x7, 0x1, 0x3, 0xffffffff, 0x7f, 0x200, 0x1, 0x4, 0x13a, 0x2, 0x0, 0x9, 0x14, 0x2, 0x2, 0x10000, 0xffffffff, 0x6, 0x2, 0x3, 0x5, 0x7fffffff, 0x5, 0x4, 0x5, 0x9, 0x1ff, 0x10001, 0x4, 0xfffffffe, 0x8, 0x7ff, 0x1ff, 0x5, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x3, 0xfffffffb, 0x9338, 0x451e, 0x7, 0x2, 0x6, 0x7, 0x81, 0x10000, 0x17, 0x5, 0xfffffff7, 0x101, 0x5, 0x4, 0xf, 0x7, 0x4, 0x553, 0x9, 0x615a, 0x0, 0x8000, 0xb, 0x9, 0x4, 0xe, 0x800, 0x4, 0xb6a7, 0xffffffff, 0x9, 0xffffff72, 0x4340, 0x5, 0x2, 0x7ff, 0x8, 0x1, 0x6, 0x7, 0x3dea, 0x1, 0x800, 0x7, 0x1, 0x4bd669bc, 0xfd0, 0xc1d, 0x200, 0x3, 0x4, 0xb, 0x6, 0x7, 0x4, 0x1d4f, 0x9, 0x1000, 0x4, 0xb, 0x1, 0x80000000, 0x6, 0xc, 0xb, 0x8, 0x80000001, 0x1, 0x101, 0x669, 0x7, 0x0, 0x3, 0x2, 0x1, 0x6, 0xff, 0x86a, 0x438, 0x7, 0x9, 0xc7, 0xfa0, 0x1, 0x7402, 0x4f0, 0x491, 0x8000, 0xffffffff, 0x2, 0x1, 0xcdb, 0xfc2, 0x3, 0x8, 0x2, 0x9, 0xad9, 0x3, 0x0, 0x9, 0x80, 0x7, 0x67, 0x7, 0x3, 0x5a, 0xfffff001, 0x8000, 0x200, 0x1, 0xbc8, 0x3, 0x95, 0x5, 0xe, 0x10, 0x6, 0x8001, 0x100, 0x401, 0xffffff6e, 0x81, 0x2, 0x6e32, 0xfffffffe, 0x1, 0x2, 0x9, 0x7fffffff, 0x1ff, 0x1cf48b9a, 0x101, 0x9, 0x8, 0x5, 0x3, 0x1, 0x36, 0x5, 0xfffeffff, 0xb, 0xfffffffe, 0x8000, 0x6e85ab00, 0x200, 0x2, 0x4, 0xf2ed, 0x37, 0x55d, 0x66, 0x3ff, 0x5, 0x5, 0x0, 0x2, 0x7, 0xfffff801, 0x6, 0x80000001, 0x8, 0x5, 0x7, 0x7, 0xb0a6, 0xffffffff, 0x9, 0x5, 0x8, 0x800, 0xb62, 0xffffff18, 0xfffffffd, 0x9, 0xa7, 0x3, 0xffb4, 0x10, 0x8000, 0x0, 0xb, 0x9, 0xba7, 0x8, 0x8cd, 0x10000, 0x6, 0x480a, 0x4, 0x9, 0x0, 0x0, 0xffffffff, 0x7ff, 0x4, 0x9, 0x7ff, 0x7ca8, 0x34a, 0x3661, 0x1, 0x6, 0x3, 0x4, 0x400, 0x5, 0x5, 0x0, 0xb0, 0x4, 0x5, 0x1073, 0x80000000, 0x5, 0x5, 0x9, 0x1, 0x6e9c, 0x7f, 0xb, 0x4, 0x5, 0x7, 0x3, 0x80000001, 0x2, 0x5, 0x6, 0x7, 0x0, 0x0, 0x12a3, 0xffff20da, 0x80000000, 0x263, 0xf, 0x81, 0x7fffffff, 0x7, 0xfffffbff, 0x8, 0x2, 0xe, 0xffff9c6d, 0xfffffffb, 0x8, 0x7077, 0x3, 0xfffff305, 0x17, 0x0, 0x5, 0x8, 0x1, 0xe, 0xe0000000, 0xffffff01, 0x4e, 0x300, 0x3, 0x9b69, 0x1, 0x8000, 0x2, 0x73, 0xffff, 0x7, 0x9, 0x6, 0x10, 0x7, 0x1, 0x5, 0x2, 0x800, 0x401, 0x1, 0x3, 0x1, 0x4, 0xed, 0x8, 0xfffffffd, 0x1000, 0x1, 0x10000, 0x10000, 0x9, 0x5, 0x101, 0x8, 0x2a, 0x4, 0xd604, 0x0, 0x2, 0x1, 0x2, 0x14, 0x8, 0xfffffffa, 0xfff, 0x3, 0x4, 0x5, 0x4397, 0x10, 0xfffffffb, 0x800, 0xfffffff7, 0x4533, 0x4, 0x10000, 0x0, 0x8, 0x6, 0x5, 0xffff, 0x101, 0x101, 0x9, 0x2, 0x8000, 0x100, 0x9, 0x6, 0xf, 0x7f, 0x0, 0x8001, 0xfd, 0x10001, 0x27, 0xfb9, 0x4, 0x1, 0x7fffffff, 0xffff, 0xe39c, 0x7, 0x101, 0x7c, 0x8, 0x1, 0x7, 0xd14, 0x14e4, 0x0, 0x4, 0x9f6, 0x5, 0x9, 0x4, 0x2, 0x1, 0x9, 0xff, 0x9, 0x1000, 0x6, 0x1000, 0x7, 0x2, 0x6, 0xdc, 0x1b, 0x3, 0x80000000, 0x4, 0x10001, 0x7f, 0x7, 0x0, 0x8001, 0x8, 0x5, 0x5, 0x4, 0x49, 0x2, 0x4, 0x2, 0x4, 0x10, 0x3, 0xdec, 0x2, 0x200, 0x9, 0x8, 0x200, 0x9, 0x7, 0x4e, 0x5, 0x5, 0x2, 0xfb, 0x7, 0x8, 0x9, 0x5, 0x200000, 0xfccd, 0x0, 0x3, 0xd, 0x1, 0x4, 0xb, 0x5, 0x1a5, 0x10, 0xe, 0x7, 0xc, 0x2, 0x5, 0x7fff, 0x2, 0xee, 0x9, 0x5, 0x9, 0x40, 0x1ff, 0x9, 0x4, 0x3, 0x7, 0x9, 0x7, 0x4, 0x200, 0x400, 0x5, 0x81, 0x7, 0x8, 0x9, 0x7f, 0xb97, 0x200, 0x7, 0x80, 0xa0, 0x7, 0x1, 0x8, 0x4, 0x400040, 0x6, 0x4, 0x5, 0x4, 0x2, 0x0, 0x5, 0x2, 0x6, 0x100, 0xd1, 0x5, 0x8, 0x1cb, 0x5, 0x5, 0x80000000, 0x2, 0x808, 0x2, 0x400, 0x0, 0x8001, 0xffff86f1, 0x7, 0x57e8cc95, 0x5, 0x0, 0x8, 0xdca7, 0x10001, 0xfff, 0x7, 0x8, 0x7, 0x4, 0x9, 0x8, 0x7, 0x1, 0x1, 0x6, 0x1, 0xfffffffb, 0xc844, 0x0, 0x6, 0x401, 0x4, 0x1, 0x7, 0xc, 0x7, 0x6, 0xa, 0xffffff01, 0x8, 0x7, 0x8, 0x2, 0x80000001, 0xfffffc01, 0x5c7, 0xe, 0x3, 0x0, 0x400, 0x800, 0x9, 0x5, 0x8, 0xe, 0xfffff800, 0x7, 0xffff, 0x18, 0xffffffff, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, 0x2, 0x2, 0x1ff, 0x8, 0x7, 0xe, 0x3, 0x5c9, 0x3, 0x65b7, 0x0, 0x0, 0x6, 0x4, 0x6, 0x7, 0x8, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x2, 0x9, 0xfffffe00, 0xe, 0x0, 0x6, 0x100, 0x0, 0x8, 0x9, 0xa4, 0x2, 0x80, 0x7fffffff, 0xc, 0x6, 0x3, 0x3, 0x7ff, 0x0, 0x1, 0x695, 0xfff, 0x3, 0x1, 0xa, 0x2e2, 0x1, 0x80000000, 0xd13e, 0x2, 0x7, 0xb, 0x1ff, 0x5, 0x9, 0x81, 0x5, 0x4, 0xc, 0x9, 0x4, 0x0, 0x8, 0x4, 0x800, 0x8, 0xffff, 0x4, 0x9, 0xeac2, 0xfffff801, 0x3ff, 0x1, 0x3ee3, 0x9, 0x9, 0x0, 0xfffffff7, 0x4, 0x6, 0x2, 0xc, 0x45, 0x0, 0x9, 0x7, 0x7, 0xae7, 0xa, 0x6, 0x76, 0x7b6a4dff, 0x1, 0xffffff9c, 0x1, 0x5, 0x9, 0x81, 0xfffffffc, 0x800, 0x200, 0x8, 0x200, 0x1, 0x99e, 0xaf2, 0x80, 0x0, 0x367, 0x4, 0x80, 0x5, 0x6, 0xffff79e8, 0xb6, 0x8, 0x400, 0x8b9, 0x7, 0xa, 0x1, 0x1ff, 0x6a4237b5, 0x100, 0x9, 0x200, 0x7fff, 0xc32, 0x0, 0x5, 0x4, 0x3, 0x3, 0x1, 0x6, 0x5, 0x8, 0x6, 0x3, 0x9, 0x9, 0xfffffffb, 0x8000, 0x0, 0x2, 0x7, 0xda0c, 0xa, 0x7, 0x100, 0x10001, 0x7, 0x5, 0xc244, 0xd3, 0x2, 0x800, 0xf, 0xfffffe00, 0x0, 0x38ea8aa, 0x3, 0x3, 0x0, 0x7d, 0x0, 0x101, 0x2, 0x10001, 0x5, 0x6, 0x4, 0x80000001, 0x9, 0x2, 0x1ddb, 0x5, 0x3, 0x10000, 0xff, 0x2, 0xf6d3, 0x4, 0x22, 0x6, 0xfffffffb, 0x1000], 0x1, 0x400, 0x6}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001240), 0x159002) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000180)={0xc, 0x1, 0x8, {0x3, 0x6}, 0x3, 0x1}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 16.824586863s ago: executing program 6 (id=10224): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x82) 16.454115566s ago: executing program 9 (id=10225): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0x9, 0x251cd8, 0x15b24d}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, &(0x7f0000000180)="c7ff443fcee17f56b5a465392acfe5ac2b61153136d75cd3016e8fcee4c605b8", 0x20, 0x5}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000240)={0x28, 0x4, 0x0, r2, 0x2e3305, 0x3d7c168c, 0x1, 0xc4d71}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x408080, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x402003, 0x0) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000300)={0x18, r2, 0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x480) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000400)={0x18, r2, 0x7, 0x0, &(0x7f0000000380)=[{0x4, 0x4}, {0x72, 0x3}, {0x8, 0x8}, {0x4, 0x10}, {0xfffffffffffffff8, 0x1000}, {0x2, 0xb}, {0x5, 0x9a}]}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000440)={0x28, 0x1, r2, r2, 0x7, 0x0, 0x2}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x60000, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r2, 0x0, &(0x7f00000004c0)="42d5ea782cb903b276774c073b6309099eabb6d239fda221f513adffa761447862f554f8be3371a5429a4c9b6889256182c1d11b255e35c7de023510b43f93b81e40f29e14e1d28b9a88376552ae1888412e3e23545c0a855b0700f1d08e30e2773c249634b013640ae407e8d61f02e121d88fe0851c4c8009916b0e2f7cafe45ad30fce8a62cf3dc256ab8647cb488acd1705d75a20157cdb692781014cfdecad2dcce4f9ba", 0xa6, 0x7}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0xa0800, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000a00)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a40), 0x400400, 0x0) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000a80)={0x28, 0x0, r2, r2, 0x8000, 0x0, 0x10}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000ac0)={0x28, 0x5, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000b00)={0xc}) syz_open_dev$video(&(0x7f0000000b40), 0xa, 0x74d040) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/schedstat\x00', 0x0, 0x0) read$hiddev(r8, &(0x7f0000000bc0)=""/144, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000d00)={0x48, 0x8, r6, 0x0, 0x7, 0x65, &(0x7f0000000c80)="675dfbe4039326aa64ff53eb83674577865f45926bd8e3109cac018a7fda0f038d0d197d028b530b835eac6a38b9c57f479f62b80f597917b527591de0b074bc978d1e02cc84f1319bfdf0117c82cba2a92852a195d29f8490669a7ac96739b34504429478", 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000d80)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x7fffffff}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e00), 0x121860, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r9, 0x3ba0, &(0x7f0000000f40)={0x48, 0x4, 0x0, 0x0, 0xe4, &(0x7f0000000e40)="1b532c41a3714c7f60ade783679d536ca3774f1bf22ee405b6be414141ddb3ff5f27d4442441e69ef4b9e3b69972f42f5e5fdd4fec3c761fcdb78e622580710c3dd674e31f27f42c1bd3d636c5bc2b01bb19487fc56c0c6248d631b63997ef6ec1edf6e49326952dbe5a0313e714c6c355bf6752bd7c6f84c70ab351cfcd663939ca8ad5e9e203326c6c25c1f71d9734568a7508f7ecc30d4a72a5e5f75be52cf7c16496f34eeee3adcfaf4d693bffc55a2e250a08f32c59978d41fe3c4297eda9359d510e33317ce72f67f338d71ccd399e7b3d11d75101106280ff9523e7fe7c1f4ac0", 0x8000}) 16.450679095s ago: executing program 6 (id=10226): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143f00, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x355a80ad4125c70b, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfffffffffffffffb}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143f00, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x355a80ad4125c70b, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfffffffffffffffb}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async) 16.360051176s ago: executing program 9 (id=10227): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat(r0, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 16.257150108s ago: executing program 9 (id=10228): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) (async) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) dup(0xffffffffffffffff) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) (rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 16.186229637s ago: executing program 6 (id=10229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 16.026013002s ago: executing program 6 (id=10230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x118) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) 15.817357013s ago: executing program 9 (id=10231): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000080)="66083eb4a8430cd39b365f9ece99afae7b3741c356b0b6a6eddd388c06ce2c0ff17a0a62c8288148aca3254d4e6205420fe2757e58e282fbc8164a997fbbf885cdd6b331eccdbf42932aca91c8a006a2c9202066a387ca1f9e013b5d3c", 0x5d, &(0x7f0000000000)=""/35, 0x23}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x10, 0xffffffffffffffff, 0xcae7b000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000080)="66083eb4a8430cd39b365f9ece99afae7b3741c356b0b6a6eddd388c06ce2c0ff17a0a62c8288148aca3254d4e6205420fe2757e58e282fbc8164a997fbbf885cdd6b331eccdbf42932aca91c8a006a2c9202066a387ca1f9e013b5d3c", 0x5d, &(0x7f0000000000)=""/35, 0x23}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x10, 0xffffffffffffffff, 0xcae7b000) (async) 15.442018702s ago: executing program 6 (id=10232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$kvm(0x0, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000024c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000280)={0x2}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x80000, 0x5) read$ptp(r4, &(0x7f0000000300)=""/210, 0xd2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2d) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x30) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x0, 0x8000, 0x40, 0x2, 0x0, 0x2004c7, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x19b, 0x2, 0x0, 0x7fffffff], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0x8000000, 0x10c000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc004ae0a, &(0x7f00000000c0)=""/8) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x5, 0x4, 0x8}}) write$nci(r7, 0x0, 0x4) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r6, 0x7dfff000) 15.405418863s ago: executing program 9 (id=10233): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_bulk={0x3, {0x6}, 0x5, 0x1, &(0x7f0000000400)="e0fd0ee8e48bfcd9ed8890ad53944642e47bbcd861d27cecdd5cff8234b57288049096ef9864815159f93def25ec87eb760cd1fe228a43e2c21a9ced2779f1e7a08f3accedab6ed93171f23daa2e7db45b792165233a153072abfbd791174b8e1907a246d5a0730d4563bc5caa98073edb2ab46be50b4ab7ebed49b2972e3837b763fdec0750e35cc69d14d5a67d3208b3a48ed01577828baa87f1cf84480375511ff75da2e6f93298f6a51a71d9b6244086423f0d33101c0e2fd501c17e9648ede1a2f6541c7af4a31bad02391d2d50e9197aa0e7d16271ab6bb6c9f5d2246a281e1e18f62b785bbf34f45ad781ad2e2e8c6c21e05c46dce6922a593d5250f12c6d00c801a371e3bfbd0f369049278a55a1f7a20ec724722eaecbdee1d84addb248f905f2ebfd1a33be17c85b5cedc8ec3e6ef8a26c0b64a87bdc9ee65d980266b81b8d307654979a657198a2cfd006619da22278dc364511fc088d65ddcc197360cf6b2d82bdf6675d9ac475b611ea5cb8086c30080a93e4722d66a8c079797a2ae20f5aabaeafd6697bf28ac5e75da9ebdc7aa2b1c0438a11925a92b568dd6520d10da7cb3fe62a49a7072d9a5f1e14fc02ce51f5f9cbb67ac745f0bfcf0731759f74a968a6ef6994b5d407af7a395557223379ef3c75621b38595f8852e52846420a21986ea4f623bf5479e6343553a52504fa191f80bec562302211e63f89b984b6e164438ab692a87e594b20ff39bb82601a66beb396ebba744c3b2704ece7fb962155c416361e9f179a4f0934790a149b742ee1de4e767710a5b13a94667823e0f38b99a2a42149e12a2cba1fc03c08a9778a588c26b40987a2ca53b1046f8687ad74b524cda1a95c21ac20b1953039313ea96e9b5367e0cf7ae83e157af3a7a0d1b259648d216152522fabef854c2905999d8d70c97257a26b7bad87ece3b7ca25118af1b57d4e3c890f69c3578785f548bdfcb2912621391f79287925b742d86fc4033f2f73d772ddf8feab32e5e18580f32092ddb2474d023fe7319d524329845c4b031276f1ded69290068ab6175882a323182ce7f3439c7c5c86554b03c8eaf44bb77763e0d40ad83626c5ccf892e9f18151b98b946afcef930de0dcb1d77c955b61cf44eef392798b101e6787e26784c76f82ede894eabeba325298220bc6ec89a01343d04e9252e06921d39a043c3a687f34cf7b87337b1de78dc005094ce96e184a36eb9ad1ca54a852fc11944fd1e7e4d399808b346c89d2f98f362c1c3cc4a15a6a2f3b2b67b02a53e9eb490ddc1602df69bf48afea3111a8a0da5a7bee3527d63b0bfa713c820e258f0530a65c579beebd0ab3195529dc2427f2b27806b4630f2ceb97f0306385312e2373e17958e7b15dd97f33577179d615f53c302ea3f6fc58a4d113e99d901d7acde6da44a0d514a4d183943e70f6265cc4be23c2894e62d4ef21defc9b7082581954bde3bf02323fa9d094dae0679c6541a2fb90e1eae66f609b197629e965020f2ac6b90abd7c079d4e7ce55fb3576072a87bd628bd934142617b1ef40dd8779c1d24e56d48667573f36078916923a6897b6880c41e12dd4ed4d3547a56a20f201f6f0b9c050304aa37d5f8ce418f4d9333ea14e81e0272b01ada3ea003dd0e2aaa5afe1a1317d17ad4ec66fc17a376caded5a67fbb23294bea746a0af14eb04951e5d37a5bdcdfc2adc4c4ed867eac17b3a45c81243d981a2c5f3a06be0d5e58315ce6a207caeffc657f2e45de78d8cff4263bdde50912af2caede46f7c5ff1a8fdabe9f6c6853fa104cc0718a74d544f3f76436555262e05a93fd02c77dab510c7b1f741a75840e0e9a0775c128c5318819c123ef7509b287c99285124d7deac1961b23be9c2ebd62db00a8c63ca82c948711bc1d346ee674e10cebe9696eb8f44b9fef55a58785deded7a44958dc4086116f9ce5ab464a7ecc979f56361c38736cead27eaaa6474bc466625b3354e69db5ca6d6b49f2f83cb06009eda8172ffbb8b1836b0ceb079ad99470f29b0019f097e49f2d56e8200c27cccf1dea3e7b06183d26b38b9eb07f66925197b253b9963b53ebc491c7799478186c3f83904066848c4054bebd234e98e90d004d438a756d2188fc72fa2a27cc305998c86322dcd13c3dbc4fc85b5f17e0f0ef989f5a967d0fe575a8744d6c4ccfcf97197905eb504e0024135d16fab0bcda26ef705ec91230838447601bfe3efe8ca7ef4b39120272a8d44c4f89e5de3a0b5b2742b91bf039111f1641ffd14c7891c6400a8f06d827e7d0c206f17ab3510311452e2cdcb7d5ed522995a863db794827a27231fe6ad071cf245517de59adff3bbb77be33034ed4b9ee0a4161c2ed50c75d437fad57c088ea73e74074210f14604d1bbfabd1e16f17ac4e4c82b9cda1496a381d3dd5042c05a3cadc8185b836f2c373b9e487dd5b3891da7383d3e1e8f4a6d37329a2d758efc93cfe4f8c475afc8c16c32b7a6daa43c76fd7fd8c38ecea0f78ede5738834a0ceeccf178ec947fd0f9241f78250f860e59bb3cfca21d13e9fe2f13f6af76bc1546b21123039554d44302caa47d2733dbc2d897634b77be78447a2bbb0b5374e7443c59a2d83dd0480be405f4edf57b1e7fb7c38c32532d15b42d193d98fa67a7311514c91be02059b85fe866b0f7c3a33a3608477b51981bd973aa8fb2bf062d637a3436a513a70edd3fb4abf8dc0e7d9d6dce071dec04cb8a639544e260c71e7ab6c1c626ab48d7089d706bf13ddbc58595b22810cf97ecf06100b4ac136149e322d2b5a5e17fa25abbf2fad72ead84cee48a818240f6d0efce626ce595b05dfd82537ea363c1c488d7128f40f43a1e2c178afaf96340313bc117bdcfed8b72ece09b091fd2b88eb286884c913b68a89eef9f7e45de6323b8a995935a90484ff951a19611cb8849159792d9256bcfd89ceff9a2b9d79d8dd8597b136882631fae07c215f42b8c92a0fbc0fdc38b1a9499e6b92cb861ba567a29a129c8b9ba77a425b9418b314ca71b6d94fa3be044eeec17e9e1b61551c7ea1704fd56b3490974a9d114151dc08f11c604dd87fb037c3f236e142f6f82abc26e6fdbc67610c3662bcba1b7c3ae88f72c12a8d5f4623b2e77cb995f330f597ff90af2da6e4a0c249d30e73841e3facfce2c7e0381360aa479508a4a385b96d56a929001f410e2d63cca255185fcbe5cd2fea74a3134a0f213ae7253bfd9a5fc73ac8e87cf9b68923359abfc3f7811ed367e35d4b1585057b51c37e324696c009663d89f618595565707faf1a50aaa5f56e203790e2955f7219eefa4a105f5705821b04eb468539871d8ce1859a06efa1b0111ee1cceea0d2dd085a4c2cc74117f4309711d97f9618b6f95b12842a37a99a1d6395ec81422d1226b6eaf2b4ac62f543460f8059b910d3afd871ae994dab4bb82148a9f1bd20c0d2c8bd38614f93d8110210ce247a898d636520fa78e8fd8635dd14194908b39a7fdf4d4e952a61069ab933dab93504330e7798f8cc7a9586fcbfaae0174323ce4bc48c05dcd6e6a5def2d09bea974d8a0059df14738d68a168b6c0061ae509443d80156518711e217e118014fbf67c3d9c52d9c86d2336cdf9dbc6385110e445b6a6b842c6882edfb2a49360b4b732a6ac22952d6c41803813af73cf64489e0e88a3bf875fa68c1b3d7a9396c16e84aa0424376659ecc82d762a488d2846b237cd231588aec2001d8c0ff798fbbcaa836e0685d418f0aa9cbe434d9c626e900f9a564244bfb5d103cfc76819ec175c4774426f6e830d25908899030c0927b9aafe4c514a8c1ee45d8241487aa4d139412015818762700ca3b54ab4ba17c3e61b58ea81c5621b830f22c179bb938b6347b333f418bf4b04b0aa59be82c87ab3a24f70cdb4776eeae45b67f33a7861e134109da094f7f837347d5ea3085edccd2fcdf75209d19974665ecf18cc3d7ca1c45fbabafdf48a3348aede57a4c7e27336d39083ce5f6db4e5fba0bf67fb9be4f3b83bc5f8eec26bf5c0eab8f30afb4d3b4b50a84f9ac3eaa93832f182fcc8144063a1038a6d2cd67790e08edda6e2a96ccf3f22d1c520279016f324ff164b7b4cf6911a97a6812ae37ad8257c9e770e6e01a14d1c952156e725b55ca7f1c8de0fbfb5a7edeab524f13a60a9fe785e314b41bf53cec68990419473e088469145468b83e757392dcff67c640e361b76ae429c6d4248c97a653d3bc62333503079df776a6eacfd0bb5a173b7adfafec09e8afd9d25a8c4224147f7b9da173cd84e627bc01e670223b9a306a411e4f89822b4fdced601e48bd048368e2cc783e7693194edf2cbf2ce1fa94372e861d4f01721a4ad0850285691ce02e2b810d9cb1682ad6b885049f5f3b0a5a681d7aa1e6930b74540a1cfd56749e89086a28b58864e942b641bdc03645260f9390b68060c52c179061bfc8b4d558811f589d3222046bfa90790f5fcee216cdd2c7610fa9132f3afd3e11fd560dc880d39d934d01dba9096cfba5e155a6a979984c0ef90d667b37f3d069377d0616ccdf66b6cfd0935707926acbb8fb6066cdd0008cff9c91269a10c951a394b5b0673fd09f2c6fa1d4922425a3873162480896386a2e13f1436baaf2e61ce0f8568dbd199125b0713cc6c0ca9b6eab2c9e1fac6e43ff5824cafcc0aaa86e7803ce44e1eb5b532da43c97e553971f12f8592eb48438a6903c11b15b354e676de426abd2e7bed3837ca5498c5c79c2c063b27c065808b8c6e65f27b2000be34da4e1898e1f9388c537acd57da389a0609e5a78b99e47f59875445e73535b45169c22278c5768809ca6b0d7c77faa62fd4fc33dfb5bc6b4758f4d6427867fda9e2eac12b442711f4ee496db9a7c1a38acb20c7410144d5820b690a38e6697d48bf939d881c818804d03a08b60aaa326aee6042faaa9c4e156ad874924aeccde320cdfa90dc17544b46bfa38339b316441dc5342cf09b800134fbbe963ed77b8f5a3cd9dc31554e80f0ffc9dda79ae386c049e512d94af843a649d2203bd332462b473dc1830d76843c0ed0962443d855ddfca1f2843a2c637476b00bc71eb3d72e6a4cb61e997304487b2c89c1b1609c1751fa18b72d3c8cc23568794189eadd74fef402d8a158d9eee92511e2222378d7e1f2297cd9925b405048a359bec36b4f4074d4531ccce88a1c4137b32704d4fbad350bda9a66a02a6e1816cca05137fed7dfecf08e8781c9065f5f92c15df05987914303ef467b24a58eae5b76960bd4b3b14de38d9c5bd0a0946f53c36de19b1f8cd6948487945791b40ed106367fbf777137837ebe6e5b29817c223fe8bc048cab2606ed11e57d3a6e776458887721a5d36d05246b9ebbc5928d509cedd5faf2d55e9d21e525e7a37e06e33b11b4e72c16db7d4648017816c2f9cdf762e94d98243eca53063f97a5afdd2b3e7d23b1e4709efc77002681be98f265ff91cafbaef4af3cc17ab3187e35dcb8237f6f22802dccb2c988449f8fa27523f7749ca755f9bbe61797db259db630bb6909a4b4bc2f11df320c6c9e0acf9ddccbaff3f1e22bbc17dd85cfaaa631f58c999ee217666a6487c8d29e6a7f07dede68cd58732697446c7b1af6e7bc827f5f51f5383e721f723c3b7b99f5f1fd68e7f67da0f17c3f4a3262e623af1688c9a50814d6a4be98524c1c8d5200640d2c0977360b7cf35726f3efc61762326bf9e31fe8caa6c6b8ef4d18e1002febf3163808e35398e8e6d5b1dba77707c6fd78f7cde5ac69977af2df2625b55ff05a88b116a5", 0x1000, 0x1, 0x101, 0x8, 0x2, 0x2, &(0x7f00000001c0)="ff3a29e99042839ae8e51060397d7834213f54d7cae18fec06d58b25058b416ab3e15cdd769ba940b907920616aa0d2f8e72afde48553ea0e3e4177cc85d9bd3eaf634da7394bfe7a155aeb34b"}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0xfc145000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 12.363811525s ago: executing program 38 (id=10145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x3, 0xfffffffffffffff7, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) read(r0, &(0x7f0000000100)=""/150, 0x96) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 61.143107ms ago: executing program 39 (id=10232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$kvm(0x0, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000024c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000280)={0x2}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x80000, 0x5) read$ptp(r4, &(0x7f0000000300)=""/210, 0xd2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2d) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x30) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x0, 0x8000, 0x40, 0x2, 0x0, 0x2004c7, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x19b, 0x2, 0x0, 0x7fffffff], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0x8000000, 0x10c000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc004ae0a, &(0x7f00000000c0)=""/8) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x5, 0x4, 0x8}}) write$nci(r7, 0x0, 0x4) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r6, 0x7dfff000) 0s ago: executing program 40 (id=10233): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_bulk={0x3, {0x6}, 0x5, 0x1, &(0x7f0000000400)="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", 0x1000, 0x1, 0x101, 0x8, 0x2, 0x2, &(0x7f00000001c0)="ff3a29e99042839ae8e51060397d7834213f54d7cae18fec06d58b25058b416ab3e15cdd769ba940b907920616aa0d2f8e72afde48553ea0e3e4177cc85d9bd3eaf634da7394bfe7a155aeb34b"}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0xfc145000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) kernel console output (not intermixed with test programs): 000:0000.0018: unknown main item tag 0x0 [ 1172.203667][T14817] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1172.898860][T23342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.120821][T23356] loop8: detected capacity change from 0 to 7 [ 1173.134082][T22275] Dev loop8: unable to read RDB block 7 [ 1173.139910][T22275] loop8: unable to read partition table [ 1173.148133][T22275] loop8: partition table beyond EOD, truncated [ 1173.178102][T23356] Dev loop8: unable to read RDB block 7 [ 1173.195215][T23356] loop8: unable to read partition table [ 1173.210739][T23356] loop8: partition table beyond EOD, truncated [ 1173.229122][T23356] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1173.328969][T23365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.347874][ T5207] Dev loop8: unable to read RDB block 7 [ 1173.354384][ T5207] loop8: unable to read partition table [ 1173.361041][ T5207] loop8: partition table beyond EOD, truncated [ 1173.676839][T23386] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1174.024001][T23408] dlm: no locking on control device [ 1174.230078][T23415] CUSE: info not properly terminated [ 1175.291849][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.309198][T24743] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.350520][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.357114][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.440670][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.494435][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.520703][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.537522][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.556237][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.590701][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.629072][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.646173][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.664590][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.680600][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.687216][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.698331][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.717953][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.735110][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.758575][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.768397][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.779424][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.793122][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.799679][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.809560][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.816376][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1175.823272][T23458] Bluetooth: hci3: Frame reassembly failed (-84) [ 1177.326167][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.328450][ T5842] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1177.332895][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.597074][T23590] syz.4.8000: attempt to access beyond end of device [ 1177.597074][T23590] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1177.774350][T23594] syz.4.8002: attempt to access beyond end of device [ 1177.774350][T23594] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1178.289739][T23627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.606126][T23658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.635578][T23665] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1180.395556][T23809] mkiss: ax0: crc mode is auto. [ 1180.503942][T23818] binder: 23813:23818 ioctl c0306201 0 returned -14 [ 1180.548437][T23818] binder: 23813:23818 ioctl 80047210 200000000200 returned -22 [ 1180.987793][T23848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.446186][T23932] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1183.975833][T24004] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 1183.975833][T24004] 4&I:#5o63ю.l%wC [ 1183.975833][T24004] ?" [ 1184.047212][T24004] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 1184.140955][T24004] CUSE: DEVNAME unspecified [ 1184.931108][T24076] loop8: detected capacity change from 0 to 7 [ 1184.942577][T22275] Dev loop8: unable to read RDB block 7 [ 1184.960718][T22275] loop8: unable to read partition table [ 1184.966665][T22275] loop8: partition table beyond EOD, truncated [ 1186.569996][T24153] sp0: Synchronizing with TNC [ 1187.527386][ T30] audit: type=1800 audit(1750403504.698:81): pid=24213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8112" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 1189.144098][T24290] random: crng reseeded on system resumption [ 1189.157109][T24290] Restarting kernel threads ... [ 1189.180425][T24290] Done restarting kernel threads. [ 1189.773521][T24325] input: syz0 as /devices/virtual/input/input257 [ 1190.337232][T24360] syz.4.8140: attempt to access beyond end of device [ 1190.337232][T24360] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1190.803147][T24384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.151017][T24448] syz.6.8158: attempt to access beyond end of device [ 1192.151017][T24448] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1192.293971][T24451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.712453][T24475] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1192.712453][T24475] program syz.4.8164 not setting count and/or reply_len properly [ 1193.920981][T24513] snd_dummy snd_dummy.0: control 1:0:0:syz0:254 is already present [ 1195.600428][T24618] nvme_fabrics: missing parameter 'transport=%s' [ 1195.617084][T24618] nvme_fabrics: missing parameter 'nqn=%s' [ 1196.138699][T24653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.356496][T24660] ALSA: mixer_oss: invalid OSS volume '(' [ 1196.835738][T24688] syz.7.8205: attempt to access beyond end of device [ 1196.835738][T24688] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1197.006909][T24698] syz.6.8208: attempt to access beyond end of device [ 1197.006909][T24698] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1197.036150][T24702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.977383][T24758] program syz.8.8218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.688794][T24800] program syz.7.8226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.737931][T24842] input input258: cannot allocate more than FF_MAX_EFFECTS effects [ 1199.775080][T24849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.508284][T24959] input: syz1 as /devices/virtual/input/input259 [ 1201.756439][T24969] syz.8.8257: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1201.809840][T24969] CPU: 1 UID: 0 PID: 24969 Comm: syz.8.8257 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1201.809870][T24969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.809883][T24969] Call Trace: [ 1201.809892][T24969] [ 1201.809900][T24969] dump_stack_lvl+0x189/0x250 [ 1201.809931][T24969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.809955][T24969] ? __pfx__printk+0x10/0x10 [ 1201.809977][T24969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1201.810003][T24969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1201.810031][T24969] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1201.810059][T24969] warn_alloc+0x214/0x310 [ 1201.810093][T24969] ? __pfx_warn_alloc+0x10/0x10 [ 1201.810129][T24969] ? __get_vm_area_node+0x28f/0x300 [ 1201.810154][T24969] ? kvm_set_memslot+0x4e2/0x1310 [ 1201.810178][T24969] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1201.810228][T24969] ? kvm_set_memslot+0x3e/0x1310 [ 1201.810250][T24969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.810287][T24969] ? kvm_set_memslot+0x4e2/0x1310 [ 1201.810305][T24969] __vmalloc_noprof+0xb1/0xf0 [ 1201.810331][T24969] ? kvm_set_memslot+0x4e2/0x1310 [ 1201.810353][T24969] kvm_set_memslot+0x4e2/0x1310 [ 1201.810375][T24969] ? kvm_set_memory_region+0x775/0xc00 [ 1201.810401][T24969] kvm_set_memory_region+0x9bb/0xc00 [ 1201.810435][T24969] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 1201.810458][T24969] kvm_vm_ioctl+0x957/0xc60 [ 1201.810480][T24969] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1201.810504][T24969] ? do_vfs_ioctl+0x12ba/0x1990 [ 1201.810530][T24969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1201.810573][T24969] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1201.810605][T24969] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1201.810634][T24969] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1201.810662][T24969] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1201.810699][T24969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1201.810747][T24969] ? __lock_acquire+0xab9/0xd20 [ 1201.810787][T24969] ? __fget_files+0x2a/0x420 [ 1201.810837][T24969] ? __fget_files+0x2a/0x420 [ 1201.810865][T24969] ? __fget_files+0x3a0/0x420 [ 1201.810893][T24969] ? __fget_files+0x2a/0x420 [ 1201.810926][T24969] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1201.810948][T24969] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1201.810969][T24969] __se_sys_ioctl+0xfc/0x170 [ 1201.810997][T24969] do_syscall_64+0xfa/0x3b0 [ 1201.811016][T24969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.811047][T24969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.811068][T24969] ? clear_bhb_loop+0x60/0xb0 [ 1201.811092][T24969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.811112][T24969] RIP: 0033:0x7f800f58e929 [ 1201.811131][T24969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.811149][T24969] RSP: 002b:00007f80103df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.811170][T24969] RAX: ffffffffffffffda RBX: 00007f800f7b6080 RCX: 00007f800f58e929 [ 1201.811185][T24969] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000006 [ 1201.811204][T24969] RBP: 00007f800f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1201.811217][T24969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.811229][T24969] R13: 0000000000000000 R14: 00007f800f7b6080 R15: 00007ffe46a221a8 [ 1201.811280][T24969] [ 1202.144020][T24969] Mem-Info: [ 1202.147282][T24969] active_anon:25065 inactive_anon:0 isolated_anon:0 [ 1202.147282][T24969] active_file:1517 inactive_file:44433 isolated_file:0 [ 1202.147282][T24969] unevictable:768 dirty:18 writeback:7 [ 1202.147282][T24969] slab_reclaimable:11551 slab_unreclaimable:100123 [ 1202.147282][T24969] mapped:24299 shmem:6420 pagetables:1766 [ 1202.147282][T24969] sec_pagetables:3 bounce:0 [ 1202.147282][T24969] kernel_misc_reclaimable:0 [ 1202.147282][T24969] free:1316926 free_pcp:11213 free_cma:0 [ 1202.192599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.293286][T24969] Node 0 active_anon:81052kB inactive_anon:0kB active_file:6068kB inactive_file:177620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97168kB dirty:84kB writeback:0kB shmem:24132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12732kB pagetables:6892kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1202.326655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.333020][T24969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1202.364482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.410503][T24969] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.440286][T24969] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1202.470470][T24969] Node 0 DMA32 free:1351488kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67504kB inactive_anon:0kB active_file:6068kB inactive_file:176308kB unevictable:1536kB writepending:84kB present:3129332kB managed:2557540kB mlocked:0kB bounce:0kB free_pcp:57712kB local_pcp:23476kB free_cma:0kB [ 1202.502648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.546716][T24969] lowmem_reserve[]: 0 0 1 1 1 [ 1202.555891][T24969] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1202.585478][T24969] lowmem_reserve[]: 0 0 0 0 0 [ 1202.590264][T24969] Node 1 Normal free:3901688kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20676kB local_pcp:10608kB free_cma:0kB [ 1202.625261][T24969] lowmem_reserve[]: 0 0 0 0 0 [ 1202.630084][T24969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1202.723283][T24969] Node 0 DMA32: 982*4kB (UME) 2564*8kB (UME) 1132*16kB (UME) 648*32kB (UME) 484*64kB (UME) 167*128kB (UME) 52*256kB (UME) 20*512kB (UME) 15*1024kB (UME) 6*2048kB (UME) 289*4096kB (M) = 1350584kB [ 1202.749154][T24969] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1202.780456][T24969] Node 1 Normal: 198*4kB (UE) 52*8kB (UME) 36*16kB (UME) 74*32kB (UME) 31*64kB (UME) 6*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3901688kB [ 1202.798892][T25003] input: syz1 as /devices/virtual/input/input260 [ 1202.820558][T24969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.832936][T24969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.860323][T24969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.870197][T24969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.895218][T24969] 52386 total pagecache pages [ 1202.899970][T24969] 0 pages in swap cache [ 1202.920589][T24969] Free swap = 124996kB [ 1202.924878][T24969] Total swap = 124996kB [ 1202.929244][T24969] 2097051 pages RAM [ 1202.933714][T24969] 0 pages HighMem/MovableOnly [ 1202.938443][T24969] 425688 pages reserved [ 1202.945699][T24969] 0 pages cma reserved [ 1203.221699][T25026] program syz.7.8269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.986709][T25076] Debayer A: ================= START STATUS ================= [ 1203.998767][T25076] Debayer A: Debayer Mean Window Size: 3 [ 1204.014359][T25076] Debayer A: ================== END STATUS ================== [ 1204.455780][T25101] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 1204.713818][T25107] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 1206.794120][T25186] input: syz0 as /devices/virtual/input/input261 [ 1208.383314][T25277] input: syz0 as /devices/virtual/input/input262 [ 1209.146226][T25316] input: syz1 as /devices/virtual/input/input263 [ 1209.590884][T25349] loop8: detected capacity change from 0 to 7 [ 1209.619785][T13529] Dev loop8: unable to read RDB block 7 [ 1209.626944][T13529] loop8: unable to read partition table [ 1209.642438][T13529] loop8: partition table beyond EOD, truncated [ 1209.680524][T25349] Dev loop8: unable to read RDB block 7 [ 1209.680573][T25349] loop8: unable to read partition table [ 1209.680816][T25349] loop8: partition table beyond EOD, truncated [ 1209.680838][T25349] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1209.870900][T25369] program syz.8.8326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1209.912006][T25369] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1210.023503][T25381] binder: BINDER_SET_CONTEXT_MGR already set [ 1210.040487][T25381] binder: 25372:25381 ioctl 4018620d 200000000080 returned -16 [ 1210.564864][T25404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.807835][T25429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.521649][T25475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.916468][T25547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.828993][T25657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.510672][T25705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.850905][T25726] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1213.850905][T25726] program syz.4.8366 not setting count and/or reply_len properly [ 1214.260216][T25738] syz.7.8368: attempt to access beyond end of device [ 1214.260216][T25738] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1214.670551][T25775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1214.717874][T25775] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1215.965457][T25852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.341736][T25883] program syz.4.8394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1216.455900][T25886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1216.477120][T25889] binder: 25887:25889 ioctl c0306201 2000000003c0 returned -14 [ 1218.316665][ T3507] Bluetooth: hci3: Frame reassembly failed (-84) [ 1219.044504][T26031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.360828][T12119] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1221.549612][T26183] vivid-000: ================= START STATUS ================= [ 1221.570911][T26183] vivid-000: Enable Output Cropping: false [ 1221.576823][T26183] vivid-000: Enable Output Composing: false [ 1221.588919][T26183] vivid-000: Enable Output Scaler: false [ 1221.595713][T26183] vivid-000: Tx RGB Quantization Range: Automatic [ 1221.605855][T26183] vivid-000: Transmit Mode: HDMI [ 1221.614362][T26183] vivid-000: Hotplug Present: 0x00000000 [ 1221.629861][T26183] vivid-000: RxSense Present: 0x00000000 [ 1221.636239][T26183] vivid-000: EDID Present: 0x00000000 [ 1221.670540][T26183] vivid-000: ================== END STATUS ================== [ 1222.204303][T26232] program syz.4.8464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.828205][T26250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.013117][T26260] autofs4:pid:26260:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1223.230533][ T5928] psmouse serio20: Failed to reset mouse on : -5 [ 1223.759383][T26287] binder: 26286:26287 ioctl c018620c 200000001180 returned -22 [ 1223.772120][T26287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.436378][T26309] misc userio: No port type given on /dev/userio [ 1224.878550][T26319] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1225.743140][T26351] input: syz1 as /devices/virtual/input/input266 [ 1226.677879][T26384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.020672][T26401] input: syz1 as /devices/virtual/input/input267 [ 1227.051081][ T5928] misc userio: Buffer overflowed, userio client isn't keeping up [ 1228.137019][ T5928] input: PS/2 Generic Mouse as /devices/serio20/input/input265 [ 1228.392392][ T5928] psmouse serio20: Failed to enable mouse on [ 1228.668110][ T30] audit: type=1800 audit(1750403545.838:82): pid=26488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8518" name="[kvm-gmem]" dev="anon_inodefs" ino=272144 res=0 errno=0 [ 1229.439432][T26520] binder: BC_ACQUIRE_RESULT not supported [ 1229.445394][T26520] binder: 26519:26520 ioctl c0306201 200000000580 returned -22 [ 1229.569669][T26530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.503358][T26583] input: syz0 as /devices/virtual/input/input269 [ 1230.720710][T26599] kvm: user requested TSC rate below hardware speed [ 1231.071063][T26629] syz.7.8548: attempt to access beyond end of device [ 1231.071063][T26629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1231.493905][T26657] input: syz1 as /devices/virtual/input/input270 [ 1231.500837][T26657] input: failed to attach handler leds to device input270, error: -6 [ 1231.768865][T26671] can0: slcan on ptm0. [ 1231.979099][T26668] can0 (unregistered): slcan off ptm0. [ 1232.702893][T26773] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1232.710884][T26772] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 1233.164384][T26807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.407788][T26817] input: syz1 as /devices/virtual/input/input272 [ 1233.509796][T26823] CUSE: info not properly terminated [ 1234.272637][T26866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.338107][T26873] CUSE: info not properly terminated [ 1234.716146][T26881] input input273: cannot allocate more than FF_MAX_EFFECTS effects [ 1235.979162][T26952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.191703][T26962] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 1236.526235][T26982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.786727][T26993] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1237.368839][T27025] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1237.784050][T27041] usb usb8: usbfs: process 27041 (syz.8.8614) did not claim interface 0 before use [ 1238.313103][T27071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.703075][T27110] binder: 27098:27110 ioctl c0306201 200000000480 returned -14 [ 1238.767135][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.773775][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.054292][T27156] autofs4:pid:27156:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 1239.121872][T27156] autofs4:pid:27156:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 1240.465744][T27291] input: syz1 as /devices/virtual/input/input274 [ 1240.874958][T27314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.911200][T27320] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1240.931434][T27320] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1241.853093][T27364] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1242.227004][T27408] binder: BC_ACQUIRE_RESULT not supported [ 1242.245797][T27408] binder: 27405:27408 ioctl c0306201 200000000580 returned -22 [ 1242.652906][ T5928] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1242.661981][ T5928] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1242.670074][ T5928] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1242.681959][T14744] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1242.689957][T14744] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1242.706789][ T5928] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1242.716167][T14744] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1242.724953][ T5928] rtc rtc0: __rtc_set_alarm: err=-22 [ 1242.743539][T14744] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1242.754260][T14744] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1242.765322][T14744] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1242.942306][T27434] fido_id[27434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1243.026270][T27443] dlm: non-version read from control device 2 [ 1243.065256][T27443] usb usb8: usbfs: process 27443 (syz.6.8668) did not claim interface 32 before use [ 1245.442752][T27546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.548193][T27555] block nbd4: NBD_DISCONNECT [ 1246.162569][T27582] input: syz1 as /devices/virtual/input/input277 [ 1246.466546][T27602] input: syz0 as /devices/virtual/input/input278 [ 1246.496544][T27602] syz.8.8702: attempt to access beyond end of device [ 1246.496544][T27602] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1247.291935][T27650] input: syz0 as /devices/virtual/input/input280 [ 1249.410012][T27788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.768365][T27860] CUSE: info not properly terminated [ 1250.785432][T27860] input: syz0 as /devices/virtual/input/input281 [ 1251.032737][T27877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.582365][T27967] sp0: Synchronizing with TNC [ 1252.705845][T27980] vivid-004: ================= START STATUS ================= [ 1252.759261][T27980] vivid-004: Radio HW Seek Mode: Bounded [ 1252.787147][T27980] vivid-004: Radio Programmable HW Seek: false [ 1252.831205][T27980] vivid-004: RDS Rx I/O Mode: Block I/O [ 1252.836872][T27980] vivid-004: Generate RBDS Instead of RDS: false [ 1252.858380][T27975] sp0: Synchronizing with TNC [ 1252.908728][T27980] vivid-004: RDS Reception: true [ 1252.914151][T27980] vivid-004: RDS Program Type: 0 inactive [ 1252.920080][T27980] vivid-004: RDS PS Name: inactive [ 1252.935667][T27980] vivid-004: RDS Radio Text: inactive [ 1252.945806][T27980] vivid-004: RDS Traffic Announcement: false inactive [ 1252.960351][T27980] vivid-004: RDS Traffic Program: false inactive [ 1252.980657][T27980] vivid-004: RDS Music: false inactive [ 1252.993518][T27980] vivid-004: ================== END STATUS ================== [ 1253.941005][T28034] CUSE: info not properly terminated [ 1253.963020][T28034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.358198][T28046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.875852][T28084] vivid-002: disconnect [ 1254.901261][T28089] usb usb8: usbfs: process 28089 (syz.7.8789) did not claim interface 0 before use [ 1255.312510][T28084] vivid-002: reconnect [ 1255.741247][T28127] syz.7.8796: attempt to access beyond end of device [ 1255.741247][T28127] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1256.622725][T28177] program syz.8.8809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.884889][T28196] input: syz1 as /devices/virtual/input/input284 [ 1257.884981][T28256] input: syz1 as /devices/virtual/input/input286 [ 1257.937134][T28260] ALSA: mixer_oss: invalid OSS volume '' [ 1258.014528][T28267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.427248][T28352] block device autoloading is deprecated and will be removed. [ 1259.435614][T28352] syz.8.8844: attempt to access beyond end of device [ 1259.435614][T28352] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1260.711140][T28415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.476053][ T30] audit: type=1400 audit(1750403578.648:83): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=28469 comm="syz.6.8866" [ 1262.605662][T28536] input: syz0 as /devices/virtual/input/input288 [ 1263.150527][T28550] mkiss: ax0: crc mode is auto. [ 1263.588863][T28586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.606128][T28590] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1263.818399][T28606] input: syz1 as /devices/virtual/input/input289 [ 1264.292154][T28634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.574358][T28648] sp0: Synchronizing with TNC [ 1264.598471][T28647] [U] [ 1265.721321][T28711] binder: 28705:28711 ioctl 40046205 0 returned -22 [ 1266.568133][T28752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1268.169477][T28842] dlm: non-version read from control device 2 [ 1268.637467][T28870] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1270.849299][T29008] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 1271.095829][T29021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.669495][T29068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.885712][T29152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.233252][ T30] audit: type=1800 audit(1750403590.408:84): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9018" name="dmabuf" dev="dmabuf" ino=79 res=0 errno=0 [ 1273.253023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.660764][T29196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1273.680791][T29196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1273.690783][T29196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1273.699804][T29196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1273.709302][T29196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1273.739568][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1273.760493][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1273.800549][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1273.830921][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1273.840590][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1274.036412][T29241] program syz.7.9024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1274.091328][T29245] program syz.7.9024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1274.213099][T29245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1274.734327][ T3507] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.768154][T29294] loop8: detected capacity change from 0 to 7 [ 1274.776033][T22275] Dev loop8: unable to read RDB block 7 [ 1274.786226][T22275] loop8: unable to read partition table [ 1274.792883][T22275] loop8: partition table beyond EOD, truncated [ 1274.824686][T29294] Dev loop8: unable to read RDB block 7 [ 1274.836700][T29294] loop8: unable to read partition table [ 1274.853972][T29294] loop8: partition table beyond EOD, truncated [ 1274.886007][T29294] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1275.034209][ T3507] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.273082][ T3507] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.331416][T29274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1275.364507][T29274] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1275.544055][ T3507] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.838226][T29191] chnl_net:caif_netlink_parms(): no params data found [ 1276.493574][T29191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.516127][T29191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.529430][T29191] bridge_slave_0: entered allmulticast mode [ 1276.551416][T29191] bridge_slave_0: entered promiscuous mode [ 1276.601124][T29191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.608387][T29191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.617325][T29191] bridge_slave_1: entered allmulticast mode [ 1276.629738][T29191] bridge_slave_1: entered promiscuous mode [ 1276.970193][ T3507] bridge_slave_1: left allmulticast mode [ 1276.980428][ T3507] bridge_slave_1: left promiscuous mode [ 1276.987572][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.088563][ T3507] bridge_slave_0: left allmulticast mode [ 1277.101315][ T3507] bridge_slave_0: left promiscuous mode [ 1277.107917][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.274507][T29582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.182464][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.271161][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.312157][ T3507] bond0 (unregistering): Released all slaves [ 1279.364131][T29191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.460658][T29617] binder_alloc: binder_alloc_mmap_handler: 29616 200000735000-200000736000 already mapped failed -16 [ 1279.607941][T29191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.001639][T29671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.074492][T29191] team0: Port device team_slave_0 added [ 1280.145938][T29191] team0: Port device team_slave_1 added [ 1280.356162][T29713] QAT: Device 7 not found [ 1280.367563][T29713] QAT: Invalid ioctl -1060596699 [ 1280.616786][T29191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.624154][T29191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.650138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.661561][T29191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.682906][T29740] QAT: Invalid ioctl -1070591350 [ 1280.703766][T29713] QAT: Invalid ioctl 8827 [ 1280.708703][T29713] QAT: Invalid ioctl -1071098112 [ 1280.833458][T29191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.847228][T29191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.873164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.910221][T29191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.082201][ T3507] hsr_slave_0: left promiscuous mode [ 1281.121770][ T3507] hsr_slave_1: left promiscuous mode [ 1281.128030][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.160614][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.211464][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.229162][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.346928][ T3507] veth1_macvtap: left promiscuous mode [ 1281.354181][ T3507] veth0_macvtap: left promiscuous mode [ 1281.359988][ T3507] veth1_vlan: left promiscuous mode [ 1281.366253][ T3507] veth0_vlan: left promiscuous mode [ 1281.647364][T29782] [U]  [ 1281.650194][T29782] [U] K{ [ 1281.653625][T29782] [U] T 1ŠFFˊ`GJǘGO/MC [ 1281.664125][T29782] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1281.683434][T29782] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1281.695461][T29782] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1281.756445][T29782] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1281.780988][T29782] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1281.798886][T29782] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1281.830995][T29782] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< 1 [ 1296.589475][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1296.608339][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1296.617368][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1296.627608][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1296.648352][ T8021] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.665645][T29196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1296.677066][T29196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1296.686231][T29196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1296.695816][T29196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1296.715521][T29196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1296.819373][T30631] mkiss: ax0: crc mode is auto. [ 1297.133162][ T8021] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.051800][ T8021] bridge_slave_1: left allmulticast mode [ 1298.057544][ T8021] bridge_slave_1: left promiscuous mode [ 1298.069722][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.083832][T30868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.098449][T30875] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1298.182223][ T8021] bridge_slave_0: left allmulticast mode [ 1298.191455][ T8021] bridge_slave_0: left promiscuous mode [ 1298.197306][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.760990][T29196] Bluetooth: hci3: command tx timeout [ 1300.214813][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.221695][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.291659][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.391221][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.457614][ T8021] bond0 (unregistering): Released all slaves [ 1300.565845][T30893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1300.594925][T30893] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1300.831800][T30638] chnl_net:caif_netlink_parms(): no params data found [ 1301.104135][T31080] binder: 31076:31080 ioctl 40286608 2000000002c0 returned -22 [ 1301.248698][T31090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.666192][T30638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.695167][T30638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.702623][T30638] bridge_slave_0: entered allmulticast mode [ 1301.717103][T30638] bridge_slave_0: entered promiscuous mode [ 1301.805581][T30638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.823105][T30638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.834422][T30638] bridge_slave_1: entered allmulticast mode [ 1301.843072][T30638] bridge_slave_1: entered promiscuous mode [ 1302.070553][ T8021] hsr_slave_0: left promiscuous mode [ 1302.120807][ T8021] hsr_slave_1: left promiscuous mode [ 1302.121650][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.121683][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.206407][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.206443][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.236643][T31172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.298736][ T8021] veth1_macvtap: left promiscuous mode [ 1302.310840][ T8021] veth0_macvtap: left promiscuous mode [ 1302.357280][ T8021] veth1_vlan: left promiscuous mode [ 1302.370706][ T8021] veth0_vlan: left promiscuous mode [ 1302.445506][T31185] input: syz1 as /devices/virtual/input/input297 [ 1304.970930][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 1305.281395][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 1308.073780][T30638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.091801][T30638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.229339][ T30] audit: type=1400 audit(1750403625.398:85): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=31266 comm="syz.7.9206" [ 1308.366180][T30638] team0: Port device team_slave_0 added [ 1308.376950][T30638] team0: Port device team_slave_1 added [ 1308.609706][T30638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.617564][T30638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.644563][T30638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.665106][T30638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.680620][T30638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.707307][T30638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.025646][T30638] hsr_slave_0: entered promiscuous mode [ 1309.033145][T30638] hsr_slave_1: entered promiscuous mode [ 1309.039490][T30638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.048038][T30638] Cannot create hsr debugfs directory [ 1310.121035][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1310.124719][T29196] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1310.129327][ T5842] Bluetooth: hci4: command 0x1003 tx timeout [ 1311.659572][T30638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1311.732131][T30638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1311.794253][T30638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1311.852661][T30638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1312.112877][T30638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.153342][T30638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.215772][T24743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.223046][T24743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.328562][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.335813][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.446406][T31583] CUSE: info not properly terminated [ 1312.673541][T31594] can0: slcan on ttyS3. [ 1312.913968][T31579] can0 (unregistered): slcan off ttyS3. [ 1312.936790][T30638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.606180][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1313.839937][T30638] veth0_vlan: entered promiscuous mode [ 1313.868182][T30638] veth1_vlan: entered promiscuous mode [ 1313.927345][T30638] veth0_macvtap: entered promiscuous mode [ 1313.952187][T30638] veth1_macvtap: entered promiscuous mode [ 1314.016811][T30638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.051425][T30638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.068946][T30638] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.077788][T30638] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.088093][T30638] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.099069][T30638] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.375401][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.385567][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.465653][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.490363][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.604881][T12119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1315.625370][T12119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1315.633607][T12119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1315.640916][T29196] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1315.650493][T12119] Bluetooth: hci4: command 0x1003 tx timeout [ 1315.703178][T29196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1315.712632][T29196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.605664][ T8021] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.173634][ T8021] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.387404][T31762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1317.395666][T31762] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1317.553373][ T8021] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.831663][ T8021] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.391968][T31734] chnl_net:caif_netlink_parms(): no params data found [ 1318.608060][ T8021] bridge_slave_1: left allmulticast mode [ 1318.608104][ T8021] bridge_slave_1: left promiscuous mode [ 1318.608326][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.695834][ T8021] bridge_slave_0: left allmulticast mode [ 1318.715519][ T8021] bridge_slave_0: left promiscuous mode [ 1318.723657][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.683673][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.791294][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.833467][ T8021] bond0 (unregistering): Released all slaves [ 1321.183399][T32036] syz.4.9264: attempt to access beyond end of device [ 1321.183399][T32036] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1321.253211][T31734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.270927][T31734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.283590][T31734] bridge_slave_0: entered allmulticast mode [ 1321.296164][T31734] bridge_slave_0: entered promiscuous mode [ 1321.462033][T32060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.491332][T32060] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1321.624682][T31734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.635158][T31734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.647746][T31734] bridge_slave_1: entered allmulticast mode [ 1321.656171][T31734] bridge_slave_1: entered promiscuous mode [ 1322.138159][T31734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.166848][T31734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.613750][T32167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.900645][ T8021] hsr_slave_0: left promiscuous mode [ 1322.910385][T32189] syz.6.9279: attempt to access beyond end of device [ 1322.910385][T32189] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1322.951507][ T8021] hsr_slave_1: left promiscuous mode [ 1322.978084][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.003635][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.051386][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.094969][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.171753][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.185534][ T8021] veth1_macvtap: left promiscuous mode [ 1323.199587][ T8021] veth0_macvtap: left promiscuous mode [ 1323.207678][ T8021] veth1_vlan: left promiscuous mode [ 1323.214413][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.231370][ T8021] veth0_vlan: left promiscuous mode [ 1323.248819][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.301565][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.331900][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.364937][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.431519][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.461599][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.487650][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.527959][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.579210][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.613477][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.687216][T32258] random: crng reseeded on system resumption [ 1323.749262][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.782138][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.797197][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.849185][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.883121][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.921356][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.933999][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.956124][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.129786][T32299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.471394][T32321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.497939][T32321] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1324.838003][T32340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1325.039843][T32352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.064602][T32352] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1325.099815][T32352] support for the xor transformation has been removed. [ 1325.164075][T32361] input: syz1 as /devices/virtual/input/input299 [ 1325.164115][T32361] input: failed to attach handler leds to device input299, error: -6 [ 1326.243555][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 1326.511569][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 1328.927705][T31734] team0: Port device team_slave_0 added [ 1329.013983][T32439] input: syz0 as /devices/virtual/input/input300 [ 1329.205947][T31734] team0: Port device team_slave_1 added [ 1329.622943][T31734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.629981][T31734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.630033][T31734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.642388][T31734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.674472][T31734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.700620][T31734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.936690][T31734] hsr_slave_0: entered promiscuous mode [ 1329.945319][T31734] hsr_slave_1: entered promiscuous mode [ 1329.953220][T31734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.961284][T31734] Cannot create hsr debugfs directory [ 1331.307946][T32662] vivid-000: disconnect [ 1331.440998][T32660] vivid-000: reconnect [ 1332.148110][T31734] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1332.246075][T31734] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1332.349069][T31734] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1332.417491][T31734] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1332.759007][T31734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.827583][T31734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.854052][T31922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.861506][T31922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.959933][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.967174][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.625237][T31734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.405633][T31734] veth0_vlan: entered promiscuous mode [ 1334.436663][T31734] veth1_vlan: entered promiscuous mode [ 1334.535745][T31734] veth0_macvtap: entered promiscuous mode [ 1334.565654][T31734] veth1_macvtap: entered promiscuous mode [ 1334.598974][T31734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.613476][T31734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.653956][T31734] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.683957][T31734] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.694769][T31734] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.710607][T31734] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.032639][T24743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.059489][T24743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.214174][ T8021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.226182][ T8021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.509835][ T411] ALSA: mixer_oss: invalid OSS volume '' [ 1336.937300][T29196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.962039][T29196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1336.971628][T29196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1336.981008][T29196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1336.989416][T29196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.790977][ T8021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.962215][ T515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1338.045702][ T8021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.453279][ T8021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.924527][ T8021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.092226][T29196] Bluetooth: hci1: command tx timeout [ 1339.179743][ T532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1339.190336][ T532] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1339.891994][ T446] chnl_net:caif_netlink_parms(): no params data found [ 1340.086805][ T8021] bridge_slave_1: left allmulticast mode [ 1340.095301][ T8021] bridge_slave_1: left promiscuous mode [ 1340.104978][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.154417][ T750] input: syz1 as /devices/virtual/input/input301 [ 1340.191923][ T8021] bridge_slave_0: left allmulticast mode [ 1340.197827][ T8021] bridge_slave_0: left promiscuous mode [ 1340.204530][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.548128][ T776] autofs4:pid:776:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1340.566023][ T776] autofs4:pid:776:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1340.638428][ T779] syz.6.9381: attempt to access beyond end of device [ 1340.638428][ T779] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1341.072143][T12376] Bluetooth: Error in BCSP hdr checksum [ 1342.272113][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.392813][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.451887][ T8021] bond0 (unregistering): Released all slaves [ 1342.840597][ T5842] Bluetooth: hci4: command 0x1003 tx timeout [ 1342.847962][T29196] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1342.916575][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.941758][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.957725][ T446] bridge_slave_0: entered allmulticast mode [ 1342.972334][ T446] bridge_slave_0: entered promiscuous mode [ 1343.204624][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.220468][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.242269][ T446] bridge_slave_1: entered allmulticast mode [ 1343.249698][ T446] bridge_slave_1: entered promiscuous mode [ 1343.588423][ T936] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38416761, 8, 0, 0, 0) [ 1343.744862][ T446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.777282][ T446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.037445][ T988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1344.065133][ T989] kvm: kvm [973]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 1344.294407][ T8021] hsr_slave_0: left promiscuous mode [ 1344.340726][ T8021] hsr_slave_1: left promiscuous mode [ 1344.346941][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.354607][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.419354][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.429291][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.519999][ T8021] veth1_macvtap: left promiscuous mode [ 1344.529931][ T8021] veth0_macvtap: left promiscuous mode [ 1344.537940][ T8021] veth1_vlan: left promiscuous mode [ 1344.548240][ T8021] veth0_vlan: left promiscuous mode [ 1345.798346][ T1037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.871986][ T1040] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1346.901288][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 1347.121903][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 1349.616198][ T446] team0: Port device team_slave_0 added [ 1349.818197][ T446] team0: Port device team_slave_1 added [ 1350.103637][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 1350.423886][ T446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.440527][ T446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.479384][ T446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.495808][ T446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.504179][ T446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.530805][ T446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.806546][ T446] hsr_slave_0: entered promiscuous mode [ 1350.831814][ T446] hsr_slave_1: entered promiscuous mode [ 1352.121703][T29196] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1352.400989][ T30] audit: type=1400 audit(1750403669.578:86): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/video#" pid=1340 comm="syz.7.9430" [ 1353.152415][ T446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.224543][ T446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.289914][ T446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1353.339215][ T446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1353.382091][ T1403] syz.7.9437: attempt to access beyond end of device [ 1353.382091][ T1403] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1353.692568][ T446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.733468][ T446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.786868][T31922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.786988][T31922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.806899][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.807014][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.096775][ T1439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.427981][ T446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.152370][ T1481] input: syz0 as /devices/virtual/input/input303 [ 1355.297837][ T446] veth0_vlan: entered promiscuous mode [ 1355.384253][ T446] veth1_vlan: entered promiscuous mode [ 1355.518103][ T446] veth0_macvtap: entered promiscuous mode [ 1355.603508][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x7 [ 1355.638510][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.684833][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.712253][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.720073][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.759523][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.781076][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.788915][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.820634][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.825729][ T446] veth1_macvtap: entered promiscuous mode [ 1355.830804][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.873423][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.892808][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.910776][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.929093][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.955186][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1355.999090][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.036578][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.066802][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.098555][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.108760][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.121805][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.129776][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.183218][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.222168][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.234301][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.248781][ T446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.272788][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.300165][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.305051][ T446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.318802][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.376140][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.384432][ T446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.384473][ T446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.384504][ T446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.384533][ T446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.531670][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.552366][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.582543][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.616978][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.632900][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.721403][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.741464][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.759760][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.793362][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.795420][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.821305][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.839095][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.851451][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.859358][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.879619][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.921697][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.941952][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.953635][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.962776][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.975303][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1356.988050][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.001509][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.005697][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.009359][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.035012][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.047595][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x6 [ 1357.058216][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.067183][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.108080][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.126552][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.146780][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.176692][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.198067][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.223679][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.260520][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.296047][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.322919][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.346140][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.367701][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.387283][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.415896][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.441870][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.458529][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.467605][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.479605][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.488591][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.498201][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.517722][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.534846][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.551947][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.584924][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.606439][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.621165][ T1717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.634257][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.658696][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.677988][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.696460][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.710458][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.728663][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.760413][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.768245][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.790367][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.798181][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.810772][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.818779][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.850438][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.858259][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.882365][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.890183][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.906720][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.960492][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.968558][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1357.992393][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.000215][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.010550][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.020537][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.028337][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.064831][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.093305][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.110380][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.118211][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.126614][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.136060][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.169940][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.210673][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.218526][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.227128][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.241869][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.251726][ T1743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1358.260021][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.268521][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.276887][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.320702][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.337266][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.364541][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.395014][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.403109][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.416903][ T1758] input: syz1 as /devices/virtual/input/input305 [ 1358.421590][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.439998][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.456703][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.479077][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519329][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519365][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519391][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519417][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519442][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519468][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519493][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519518][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519543][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519569][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519594][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519619][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519644][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519669][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519694][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519719][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519744][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519769][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519795][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.519821][ T979] hid-generic 0008:0000:FFFFFBFF.001A: unknown main item tag 0x0 [ 1358.523352][ T979] hid-generic 0008:0000:FFFFFBFF.001A: hidraw0: HID v9.86 Device [syz0] on syz1 [ 1358.703840][ T1783] fido_id[1783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1358.712260][ T1791] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1359.171347][ T1814] usb usb8: usbfs: process 1814 (syz.6.9473) did not claim interface 0 before use [ 1359.436187][ T1826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.688032][ T1813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1360.086427][ T1864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.128754][ T1864] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1360.658434][T14817] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1360.682621][T14817] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1360.740053][T14817] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1360.770890][T14817] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1360.778271][T14817] rtc rtc0: __rtc_set_alarm: err=-22 [ 1361.649525][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.656172][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.283477][ T2015] input: syz1 as /devices/virtual/input/input308 [ 1364.020757][ T2040] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1364.585831][ T2056] loop8: detected capacity change from 0 to 7 [ 1364.595284][ T2056] Dev loop8: unable to read RDB block 7 [ 1364.611235][ T2056] loop8: unable to read partition table [ 1364.617578][ T2056] loop8: partition table beyond EOD, truncated [ 1364.651307][ T2056] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1364.733454][ T2056] sg_write: data in/out 989/150 bytes for SCSI command 0x3a-- guessing data in; [ 1364.733454][ T2056] program syz.8.9511 not setting count and/or reply_len properly [ 1367.828129][ T2089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.095858][ T2099] random: crng reseeded on system resumption [ 1369.889098][ T30] audit: type=1400 audit(1750403687.058:87): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=2162 comm="syz.6.9529" [ 1370.259178][ T2177] QAT: Device 253 not found [ 1371.022760][ T2212] usb usb1: usbfs: process 2212 (syz.8.9536) did not claim interface 0 before use [ 1371.488563][ T2228] binder: 2225:2228 ioctl c0306201 2000000002c0 returned -14 [ 1371.671870][ T2238] random: crng reseeded on system resumption [ 1371.914545][ T2251] syz.8.9545: attempt to access beyond end of device [ 1371.914545][ T2251] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1372.085134][ T2257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.117645][ T2259] vivid-000: disconnect [ 1372.375713][ T2252] vivid-000: reconnect [ 1372.857381][ T2289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1373.144006][ T2296] [U]  [ 1373.593290][ T30] audit: type=1400 audit(1750403690.758:88): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=2316 comm="syz.8.9557" [ 1374.099339][ T2348] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1374.115994][ T2348] dlm: no locking on control device [ 1374.399489][ T2354] syz.7.9565: attempt to access beyond end of device [ 1374.399489][ T2354] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1376.064876][ T2410] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1376.728419][ T2427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.321029][ T2468] syz.6.9587: attempt to access beyond end of device [ 1377.321029][ T2468] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1377.388737][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1377.398603][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1377.407308][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1377.415750][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1377.423874][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1377.454328][T29196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1377.461905][T29196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1377.470306][T29196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1377.500636][T29196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1377.508557][T29196] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1378.401849][ T2556] misc userio: Begin command sent, but we're already running [ 1378.535973][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.646885][ T2564] mkiss: ax0: crc mode is auto. [ 1378.793058][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.225777][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.360173][ T2632] input: syz1 as /devices/virtual/input/input309 [ 1379.463647][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.562254][T29196] Bluetooth: hci4: command tx timeout [ 1379.819965][ T2470] chnl_net:caif_netlink_parms(): no params data found [ 1380.254982][ T36] bridge_slave_1: left allmulticast mode [ 1380.265012][ T36] bridge_slave_1: left promiscuous mode [ 1380.274569][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.362104][ T36] bridge_slave_0: left allmulticast mode [ 1380.378608][ T36] bridge_slave_0: left promiscuous mode [ 1380.386963][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.680979][ T2770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.691384][ T2770] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1381.660030][ T2906] input: syz1 as /devices/virtual/input/input311 [ 1381.881913][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.895580][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.904772][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.913743][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.921543][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.929142][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.940483][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.947959][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.955840][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.967315][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.982555][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1381.990143][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.008066][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.016516][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.024735][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.042412][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.050143][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.068796][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.077319][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.086061][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.097828][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.108088][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.116095][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.125404][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.133139][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.140938][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.148482][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.157190][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.204576][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.237210][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.245997][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.260363][T15734] hid-generic 0000:0000:0100.001B: unknown main item tag 0x0 [ 1382.269801][T15734] hid-generic 0000:0000:0100.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1382.426911][ T2940] fido_id[2940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1382.744138][ T2963] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1382.815133][ T2964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1382.881323][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.962251][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.023068][ T36] bond0 (unregistering): Released all slaves [ 1383.462641][ T2470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.484244][ T2470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.491970][ T2470] bridge_slave_0: entered allmulticast mode [ 1383.500067][ T2470] bridge_slave_0: entered promiscuous mode [ 1383.517770][ T2470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.525580][ T2470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.533577][ T2470] bridge_slave_1: entered allmulticast mode [ 1383.545125][ T2470] bridge_slave_1: entered promiscuous mode [ 1384.054680][ T2470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.086589][ T2470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.661238][ T36] hsr_slave_0: left promiscuous mode [ 1384.700794][ T36] hsr_slave_1: left promiscuous mode [ 1384.706707][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.735044][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.801931][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.809399][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.936989][ T36] veth1_macvtap: left promiscuous mode [ 1384.942665][ T36] veth0_macvtap: left promiscuous mode [ 1384.948358][ T36] veth1_vlan: left promiscuous mode [ 1384.966735][ T36] veth0_vlan: left promiscuous mode [ 1387.152737][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1387.382448][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1389.954772][ T2470] team0: Port device team_slave_0 added [ 1389.965593][ T2470] team0: Port device team_slave_1 added [ 1390.206401][ T3130] binder: 3129:3130 ioctl 40046205 0 returned -22 [ 1390.430076][T24743] Bluetooth: hci1: Frame reassembly failed (-84) [ 1390.494616][ T2470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.502754][ T2470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.528741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.538099][ T2470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.572335][ T2470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.579370][ T2470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.603127][ T3166] input: syz1 as /devices/virtual/input/input312 [ 1390.619843][ T2470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.789734][ T3189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.906913][ T3206] input: syz1 as /devices/virtual/input/input313 [ 1390.928958][ T2470] hsr_slave_0: entered promiscuous mode [ 1390.937669][ T2470] hsr_slave_1: entered promiscuous mode [ 1391.395586][ T3270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.688615][ T2470] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1391.765834][ T2470] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1391.845927][ T2470] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1391.913939][ T2470] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1392.188538][ T2470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.235887][ T2470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.275739][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.283047][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.358126][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.365536][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.440752][T29196] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1392.447315][ T5842] Bluetooth: hci1: command 0x1003 tx timeout [ 1392.604595][ T2470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1393.219472][ T2470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.143585][ T2470] veth0_vlan: entered promiscuous mode [ 1394.223844][ T2470] veth1_vlan: entered promiscuous mode [ 1394.338399][ T2470] veth0_macvtap: entered promiscuous mode [ 1394.381487][ T2470] veth1_macvtap: entered promiscuous mode [ 1394.422848][ T2470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.472212][ T2470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.505184][ T2470] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.540417][ T2470] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.560415][ T2470] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.569283][ T2470] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.968573][T31922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.005111][T31922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.129512][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.163879][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.758717][ T3537] binder: 3535:3537 ioctl 40489426 0 returned -22 [ 1396.519652][ T3585] vivid-000: disconnect [ 1396.619201][ T3578] vivid-000: reconnect [ 1398.876285][ T3691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1400.872164][ T3817] syz.7.9727: attempt to access beyond end of device [ 1400.872164][ T3817] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1401.148415][ T3830] random: crng reseeded on system resumption [ 1401.932120][ T1881] Bluetooth: hci1: Frame reassembly failed (-84) [ 1403.283168][ T3933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1403.492816][ T3551] Bluetooth: hci5: Frame reassembly failed (-84) [ 1403.960619][T29196] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1404.696908][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.720455][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.727955][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.754916][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.762666][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.770101][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.779956][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.790868][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.798339][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.806633][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.814459][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.827383][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.838029][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.848378][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.856205][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.864105][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.871971][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.879437][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.887362][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.907391][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.915231][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.922743][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.930454][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.938106][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.950110][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.958728][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967450][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967480][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967507][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967533][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967559][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967584][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967610][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967637][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967669][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967696][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967721][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967747][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967774][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967800][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.967826][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990069][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990104][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990132][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990158][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990185][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990211][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990362][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990391][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990417][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990444][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990471][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990497][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990524][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990550][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990576][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990610][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990636][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990662][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990689][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990716][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990742][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990770][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990796][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990822][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990848][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990874][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990901][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990927][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990953][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.990980][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991006][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991033][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991059][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991085][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991112][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991138][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991164][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991191][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991216][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991243][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991269][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991296][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991323][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991350][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991384][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991410][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991436][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991463][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991490][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991516][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991543][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991569][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991595][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991632][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991659][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991685][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991749][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.991776][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995537][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995575][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995612][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995639][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995667][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995694][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995720][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995747][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995774][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995801][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995828][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995855][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995882][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995908][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995934][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995960][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.995987][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996014][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996041][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996067][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996093][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996120][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996147][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996173][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996200][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996251][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996278][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996305][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996332][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996359][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996387][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996414][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996443][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996469][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996496][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996522][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996549][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996576][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996610][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996637][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996664][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996690][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996717][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996744][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996771][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996797][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996824][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996851][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996878][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996909][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996935][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996963][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.996990][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997017][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997044][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997071][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997098][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997124][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997151][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997178][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997205][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997232][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997259][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997285][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997312][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997339][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997366][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997393][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997420][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997447][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997474][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997502][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997529][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997556][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997583][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997616][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997643][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997670][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997697][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997724][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997750][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997777][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997804][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997830][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997857][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997884][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997911][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997938][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997965][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.997992][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998018][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998045][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998072][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998099][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998126][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998153][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998181][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998208][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998235][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998262][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998289][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998316][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998343][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998370][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998397][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998424][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998451][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998477][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998504][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998531][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998558][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998585][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998618][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1404.998645][ T5928] hid-generic 01FF:0004:0400.001C: unknown main item tag 0x0 [ 1405.017039][ T5928] hid-generic 01FF:0004:0400.001C: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1405.125386][ T4030] fido_id[4030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1405.674840][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1405.696439][T31254] Bluetooth: hci5: command 0x1003 tx timeout [ 1406.504718][ T4038] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1406.779036][ T4053] ALSA: seq fatal error: cannot create timer (-22) [ 1406.823262][ T4053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.274378][ T4086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.330641][ T4093] input: syz1 as /devices/virtual/input/input316 [ 1408.424484][ T4157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.596096][ T4170] sp0: Synchronizing with TNC [ 1409.114259][ T4218] ptm ptm17: ldisc open failed (-12), clearing slot 17 [ 1409.694234][ T4267] Scaler: ================= START STATUS ================= [ 1409.701865][ T4267] Scaler: ================== END STATUS ================== [ 1410.553914][ T1881] Bluetooth: (null): Invalid header checksum [ 1410.560149][ T1881] Bluetooth: (null): Invalid header checksum [ 1410.664573][ T1881] Bluetooth: (null): Invalid header checksum [ 1410.772488][ T3551] Bluetooth: (null): Invalid header checksum [ 1411.912804][ T4374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.268432][ T4401] binder: 4400:4401 ioctl c0046209 0 returned -22 [ 1412.434216][ T4413] vivid-000: ================= START STATUS ================= [ 1412.442735][ T4413] vivid-000: Generate PTS: true [ 1412.447831][ T4413] vivid-000: Generate SCR: true [ 1412.453399][ T4413] tpg source WxH: 320x180 (Y'CbCr) [ 1412.458619][ T4413] tpg field: 1 [ 1412.462874][ T4413] tpg crop: (0,0)/320x180 [ 1412.467244][ T4413] tpg compose: (0,0)/320x180 [ 1412.472380][ T4413] tpg colorspace: 9 [ 1412.476261][ T4413] tpg transfer function: 7/7 [ 1412.481522][ T4413] tpg Y'CbCr encoding: 1/1 [ 1412.487108][ T4413] tpg quantization: 2/2 [ 1412.495248][ T4413] tpg RGB range: 0/1 [ 1412.499201][ T4413] vivid-000: ================== END STATUS ================== [ 1412.724417][ T5928] hid (null): report_id 3589440959 is invalid [ 1412.733976][ T5928] hid (null): unknown global tag 0xd [ 1412.739343][ T5928] hid (null): bogus close delimiter [ 1412.750023][ T5928] hid (null): unknown global tag 0x18 [ 1412.756813][ T5928] hid (null): unknown global tag 0xe [ 1412.770411][ T5928] hid (null): unknown global tag 0xd [ 1412.793772][ T5928] hid (null): global environment stack underflow [ 1412.796555][ T4432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.821045][ T5928] hid (null): unknown global tag 0xd [ 1412.848229][ T5928] hid (null): unknown global tag 0xd [ 1412.860953][ T5928] hid (null): unknown global tag 0xc [ 1412.866512][ T5928] hid (null): global environment stack underflow [ 1412.883160][ T5928] hid (null): global environment stack underflow [ 1412.889609][ T5928] hid (null): unknown global tag 0x93 [ 1412.910598][ T5928] hid (null): unknown global tag 0xc [ 1412.916522][ T5928] hid (null): unknown global tag 0xd [ 1412.922735][ T5928] hid (null): unknown global tag 0xe [ 1412.928549][ T5928] hid (null): unknown global tag 0xe [ 1412.934411][ T5928] hid (null): report_id 2916797515 is invalid [ 1412.942990][ T5928] hid (null): invalid report_count -1697511347 [ 1412.949479][ T5928] hid (null): unknown global tag 0xc [ 1412.962337][ T5928] hid (null): unknown global tag 0xc [ 1412.967812][ T5928] hid (null): unknown global tag 0xc [ 1412.974612][ T5928] hid (null): report_id 3318336844 is invalid [ 1412.981338][ T5928] hid (null): unknown global tag 0xd [ 1412.986698][ T5928] hid (null): unknown global tag 0xdd [ 1412.992845][ T5928] hid (null): unknown global tag 0xc [ 1412.998324][ T5928] hid (null): unknown global tag 0x69 [ 1413.004891][ T5928] hid (null): unknown global tag 0xe [ 1413.010849][ T5928] hid (null): unknown global tag 0xc [ 1413.016791][ T5928] hid (null): invalid report_size 1321776508 [ 1413.024768][ T5928] hid (null): unknown global tag 0x22 [ 1413.033060][ T5928] hid (null): report_id 4198367193 is invalid [ 1413.039288][ T5928] hid (null): invalid report_size -1108811834 [ 1413.045922][ T5928] hid (null): unknown global tag 0xe [ 1413.052184][ T5928] hid (null): unknown global tag 0xe [ 1413.058764][ T5928] hid (null): report_id 3541283548 is invalid [ 1413.067733][ T5928] hid (null): global environment stack overflow [ 1413.076131][ T5928] hid (null): bogus close delimiter [ 1413.085985][ T5928] hid (null): invalid report_count -298909260 [ 1413.092598][ T5928] hid (null): unknown global tag 0xd3 [ 1413.098070][ T5928] hid (null): unknown global tag 0xd [ 1413.112323][ T5928] hid-generic 0008:0777:0008.001D: collection stack underflow [ 1413.145164][ T5928] hid-generic 0008:0777:0008.001D: item 0 2 0 12 parsing failed [ 1413.172578][ T5928] hid-generic 0008:0777:0008.001D: probe with driver hid-generic failed with error -22 [ 1413.225393][ T4456] binder: 4454:4456 ioctl c00c620f 200000000180 returned -22 [ 1414.166525][ T4518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.266500][ T4525] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1414.598218][ T4539] ALSA: mixer_oss: invalid index 100000 [ 1415.775084][ T4622] binder: 4619:4622 ioctl c0306201 2000000003c0 returned -14 [ 1415.797270][ T4622] binder: BINDER_SET_CONTEXT_MGR already set [ 1415.829592][ T4622] binder: 4619:4622 ioctl 4018620d 200000000000 returned -16 [ 1416.257938][ T4647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1416.619203][ T4664] snd_dummy snd_dummy.0: control 1:0:0:syz0:254 is already present [ 1416.647370][ T4669] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1416.658015][ T4669] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1417.789097][ T4719] ALSA: mixer_oss: invalid OSS volume '' [ 1417.811104][ T4719] ALSA: mixer_oss: invalid OSS volume '' [ 1418.275367][ T4753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.282836][ T4748] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1419.052829][ T4806] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1420.270947][ T4861] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1420.660588][ T4884] block nbd9: NBD_DISCONNECT [ 1421.750563][ T4951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.458337][ T8021] Bluetooth: hci1: Frame reassembly failed (-84) [ 1422.490083][ T4990] Bluetooth: hci1: Frame reassembly failed (-84) [ 1422.520716][ T4990] Bluetooth: hci1: Frame reassembly failed (-84) [ 1423.088461][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.100446][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.520436][T31254] Bluetooth: hci1: command 0xfc11 tx timeout [ 1424.521042][ T5842] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1425.909035][ T5139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.935203][ T5211] binder: 5210:5211 ioctl 40046210 ffffffffffffffff returned -14 [ 1427.765573][ T5260] binder: 5255:5260 ioctl 40046205 0 returned -22 [ 1427.964001][ T5267] binder: 5255:5267 ioctl c0306201 0 returned -14 [ 1427.982879][ T5260] binder: 5255:5260 ioctl c0306201 0 returned -14 [ 1429.042979][ T5306] vivid-007: kernel_thread() failed [ 1430.739871][ T5384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1430.757659][ T5384] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1430.931506][ T5395] sp0: Synchronizing with TNC [ 1431.049928][ T5410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1433.030996][ T5539] binder: 5537:5539 ioctl c018620c 200000000380 returned -22 [ 1434.053427][ T5604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1434.056632][ T5599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1435.344136][ T5670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.785194][ T5883] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1437.826991][ T5883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.861012][ T5883] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1438.064009][ T5944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1438.391963][ T5969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1438.489237][ T5981] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1438.519245][ T5981] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1438.716197][ T5987] binder: 5985:5987 ioctl c0306201 200000000640 returned -22 [ 1438.742328][ T5987] binder: 5985:5987 ioctl 40086607 200000000000 returned -22 [ 1439.092630][ T6012] input: syz1 as /devices/virtual/input/input322 [ 1439.242187][ T6016] syz.7.10082: attempt to access beyond end of device [ 1439.242187][ T6016] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1439.304168][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1439.382076][ T6029] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.432927][ T6028] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.633432][ T3911] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.641708][ T3911] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.649431][ T3911] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.686953][ T3911] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1439.694521][ T3911] rtc rtc0: __rtc_set_alarm: err=-22 [ 1439.768779][ T6056] can0: slcan on ptm0. [ 1439.951003][ T6039] can0 (unregistered): slcan off ptm0. [ 1441.090476][ T6111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1442.475882][ T6196] binder: 6194:6196 ioctl c0306201 200000000640 returned -22 [ 1444.320359][ T6266] loop8: detected capacity change from 0 to 7 [ 1444.349491][ T6266] Dev loop8: unable to read RDB block 7 [ 1444.365306][ T6266] loop8: unable to read partition table [ 1444.374020][ T6266] loop8: partition table beyond EOD, truncated [ 1444.392560][ T6266] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1444.500848][ T5207] Dev loop8: unable to read RDB block 7 [ 1444.506517][ T5207] loop8: unable to read partition table [ 1444.518875][ T5207] loop8: partition table beyond EOD, truncated [ 1445.474340][ T6319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.838008][ T6564] usb usb8: usbfs: process 6564 (syz.9.10169) did not claim interface 0 before use [ 1452.027680][ T6676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1452.641612][ T6692] ALSA: mixer_oss: invalid OSS volume '(' [ 1453.882569][ T6748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.563336][ T6768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.575817][ T6771] program syz.6.10215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1455.329913][T31254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1455.369658][T31254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1455.379150][T31254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1455.391199][T31254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1455.404068][T31254] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1455.432522][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1455.440161][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1455.448424][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1455.456712][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1455.465957][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1456.138088][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.451267][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.672740][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.930860][ T6877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1457.012802][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.570631][T31254] Bluetooth: hci1: command tx timeout [ 1457.627030][ T36] bridge_slave_1: left allmulticast mode [ 1457.645136][ T36] bridge_slave_1: left promiscuous mode [ 1457.670600][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.742865][ T36] bridge_slave_0: left allmulticast mode [ 1457.762113][ T36] bridge_slave_0: left promiscuous mode [ 1457.768007][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.650404][T31254] Bluetooth: hci1: command tx timeout [ 1459.861381][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.951126][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.985283][ T36] bond0 (unregistering): Released all slaves [ 1460.041795][ T6800] chnl_net:caif_netlink_parms(): no params data found [ 1460.080506][ T6996] tap0: tun_chr_ioctl cmd 1074025680 [ 1460.515445][ T6995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.527945][ T6995] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1460.894324][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.925303][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.939833][ T6800] bridge_slave_0: entered allmulticast mode [ 1460.948167][ T6800] bridge_slave_0: entered promiscuous mode [ 1460.969784][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.987263][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.000093][ T6800] bridge_slave_1: entered allmulticast mode [ 1461.009639][ T6800] bridge_slave_1: entered promiscuous mode [ 1461.256571][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.278625][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.577093][ T6800] team0: Port device team_slave_0 added [ 1461.597847][ T6800] team0: Port device team_slave_1 added [ 1461.845624][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.852911][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.879593][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.893992][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.901298][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.929505][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.187928][ T6800] hsr_slave_0: entered promiscuous mode [ 1462.194595][ T6800] hsr_slave_1: entered promiscuous mode [ 1462.200926][ T6800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.208513][ T6800] Cannot create hsr debugfs directory [ 1464.103113][ T6800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1464.163477][ T6800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1464.222435][ T6800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1464.244355][ T6800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1464.388030][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.415171][ T6800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.436176][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.443598][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.466960][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.474197][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.802804][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.185408][ T6800] veth0_vlan: entered promiscuous mode [ 1465.209843][ T6800] veth1_vlan: entered promiscuous mode [ 1465.259148][ T6800] veth0_macvtap: entered promiscuous mode [ 1465.273254][ T6800] veth1_macvtap: entered promiscuous mode [ 1465.296803][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.315390][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.329440][ T6800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.339751][ T6800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.351958][ T6800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.361120][ T6800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.527109][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.533703][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.965812][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.972356][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.408223][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.414793][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.280394][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 1618.288106][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1618.295872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1618.304651][ T31] task:kworker/u8:2 state:D stack:21864 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1618.316876][ T31] Workqueue: netns cleanup_net [ 1618.321747][ T31] Call Trace: [ 1618.325057][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1618.328022][ T31] __schedule+0x16f5/0x4d00 [ 1618.333017][ T31] ? __lock_acquire+0xab9/0xd20 [ 1618.337945][ T31] ? schedule+0x165/0x360 [ 1618.342709][ T31] ? __pfx___schedule+0x10/0x10 [ 1618.347657][ T31] ? schedule+0x91/0x360 [ 1618.352228][ T31] schedule+0x165/0x360 [ 1618.356449][ T31] schedule_preempt_disabled+0x13/0x30 [ 1618.363121][ T31] __mutex_lock+0x724/0xe80 [ 1618.367677][ T31] ? kobject_put+0x43f/0x480 [ 1618.372752][ T31] ? __mutex_lock+0x51b/0xe80 [ 1618.377496][ T31] ? rfkill_unregister+0xc8/0x220 [ 1618.382988][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1618.388057][ T31] ? __pfx_device_del+0x10/0x10 [ 1618.394317][ T31] rfkill_unregister+0xc8/0x220 [ 1618.399217][ T31] wiphy_unregister+0x238/0xae0 [ 1618.404573][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1618.410780][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 1618.416192][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1618.421989][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1618.427262][ T31] ? kfree+0x18e/0x440 [ 1618.431816][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1618.437339][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 1618.443502][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1618.449637][ T31] hwsim_exit_net+0x584/0x640 [ 1618.454891][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1618.460437][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1618.466306][ T31] ops_undo_list+0x49a/0x990 [ 1618.471694][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1618.476870][ T31] cleanup_net+0x4c5/0x800 [ 1618.481788][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1618.486778][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1618.495276][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1618.520246][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1618.526046][ T31] process_scheduled_works+0xae1/0x17b0 [ 1618.550234][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1618.556334][ T31] worker_thread+0x8a0/0xda0 [ 1618.566225][ T31] kthread+0x70e/0x8a0 [ 1618.575480][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1618.581010][ T31] ? __pfx_kthread+0x10/0x10 [ 1618.586057][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1618.591549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1618.596817][ T31] ? __pfx_kthread+0x10/0x10 [ 1618.601646][ T31] ret_from_fork+0x3f9/0x770 [ 1618.606274][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1618.611531][ T31] ? __switch_to_asm+0x39/0x70 [ 1618.616344][ T31] ? __switch_to_asm+0x33/0x70 [ 1618.621227][ T31] ? __pfx_kthread+0x10/0x10 [ 1618.625866][ T31] ret_from_fork_asm+0x1a/0x30 [ 1618.630767][ T31] [ 1618.633966][ T31] INFO: task syz-executor:31734 blocked for more than 143 seconds. [ 1618.641963][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1618.649637][ T31] Blocked by coredump. [ 1618.654405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1618.663296][ T31] task:syz-executor state:D stack:21288 pid:31734 tgid:31734 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1618.675343][ T31] Call Trace: [ 1618.678645][ T31] [ 1618.682100][ T31] __schedule+0x16f5/0x4d00 [ 1618.686659][ T31] ? __lock_acquire+0xab9/0xd20 [ 1618.692008][ T31] ? schedule+0x165/0x360 [ 1618.696393][ T31] ? __pfx___schedule+0x10/0x10 [ 1618.701732][ T31] ? schedule+0x91/0x360 [ 1618.706020][ T31] schedule+0x165/0x360 [ 1618.710284][ T31] schedule_preempt_disabled+0x13/0x30 [ 1618.715778][ T31] __mutex_lock+0x724/0xe80 [ 1618.720324][ T31] ? kobject_put+0x43f/0x480 [ 1618.724934][ T31] ? __mutex_lock+0x51b/0xe80 [ 1618.729625][ T31] ? rfkill_unregister+0xc8/0x220 [ 1618.734772][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1618.739834][ T31] ? __pfx_device_del+0x10/0x10 [ 1618.744767][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 1618.750016][ T31] rfkill_unregister+0xc8/0x220 [ 1618.755030][ T31] hci_unregister_dev+0x360/0x500 [ 1618.760094][ T31] vhci_release+0x80/0xd0 [ 1618.764632][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1618.769699][ T31] __fput+0x44c/0xa70 [ 1618.773816][ T31] task_work_run+0x1d1/0x260 [ 1618.778449][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1618.783673][ T31] ? kmem_cache_free+0x18f/0x400 [ 1618.788681][ T31] do_exit+0x6ad/0x22e0 [ 1618.792945][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1618.798006][ T31] ? __pfx_do_exit+0x10/0x10 [ 1618.802991][ T31] do_group_exit+0x21c/0x2d0 [ 1618.807600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1618.812902][ T31] get_signal+0x1286/0x1340 [ 1618.817468][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1618.823138][ T31] ? do_unlinkat+0x509/0x560 [ 1618.827775][ T31] ? kmem_cache_free+0x18f/0x400 [ 1618.832854][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1618.839057][ T31] ? do_unlinkat+0x509/0x560 [ 1618.843814][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1618.849322][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1618.854706][ T31] do_syscall_64+0x2bd/0x3b0 [ 1618.859329][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.865493][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1618.871873][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1618.876588][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.882583][ T31] RIP: 0033:0x7fa17a38ded7 [ 1618.887113][ T31] RSP: 002b:00007ffdb85b9c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000057 [ 1618.895655][ T31] RAX: ffffffffffffffff RBX: 00000000000046b0 RCX: 00007fa17a38ded7 [ 1618.903708][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffdb85b9d10 [ 1618.912159][ T31] RBP: 00007ffdb85b9d10 R08: 0000000000000000 R09: 0000000000000000 [ 1618.920779][ T31] R10: 0000000000000000 R11: 0000000000000212 R12: 00007ffdb85bada0 [ 1618.928800][ T31] R13: 00007fa17a410925 R14: 0000555577a074a8 R15: 0000000000000005 [ 1618.936913][ T31] [ 1618.939998][ T31] INFO: task kworker/1:3:3962 blocked for more than 144 seconds. [ 1618.947825][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1618.955572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1618.964361][ T31] task:kworker/1:3 state:D stack:26520 pid:3962 tgid:3962 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1618.976529][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1618.983343][ T31] Call Trace: [ 1618.986662][ T31] [ 1618.989619][ T31] __schedule+0x16f5/0x4d00 [ 1618.994275][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1618.999699][ T31] ? schedule+0x165/0x360 [ 1619.004353][ T31] ? __pfx___schedule+0x10/0x10 [ 1619.009302][ T31] ? schedule+0x91/0x360 [ 1619.014022][ T31] schedule+0x165/0x360 [ 1619.018257][ T31] schedule_preempt_disabled+0x13/0x30 [ 1619.024068][ T31] __mutex_lock+0x724/0xe80 [ 1619.028626][ T31] ? look_up_lock_class+0x74/0x170 [ 1619.033963][ T31] ? __mutex_lock+0x51b/0xe80 [ 1619.038709][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1619.045025][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1619.050089][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1619.055930][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1619.061736][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1619.067835][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1619.073668][ T31] process_scheduled_works+0xae1/0x17b0 [ 1619.079270][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1619.085594][ T31] worker_thread+0x8a0/0xda0 [ 1619.090325][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1619.096715][ T31] ? __kthread_parkme+0x7b/0x200 [ 1619.102024][ T31] kthread+0x70e/0x8a0 [ 1619.106152][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1619.111615][ T31] ? __pfx_kthread+0x10/0x10 [ 1619.116287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1619.121655][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.126897][ T31] ? __pfx_kthread+0x10/0x10 [ 1619.131605][ T31] ret_from_fork+0x3f9/0x770 [ 1619.136255][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1619.141747][ T31] ? __switch_to_asm+0x39/0x70 [ 1619.146532][ T31] ? __switch_to_asm+0x33/0x70 [ 1619.151408][ T31] ? __pfx_kthread+0x10/0x10 [ 1619.156039][ T31] ret_from_fork_asm+0x1a/0x30 [ 1619.160973][ T31] [ 1619.164062][ T31] INFO: task syz-executor:6800 blocked for more than 144 seconds. [ 1619.175565][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1619.183559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1619.192352][ T31] task:syz-executor state:D stack:21960 pid:6800 tgid:6800 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1619.204370][ T31] Call Trace: [ 1619.207679][ T31] [ 1619.210730][ T31] __schedule+0x16f5/0x4d00 [ 1619.215303][ T31] ? __lock_acquire+0xab9/0xd20 [ 1619.220235][ T31] ? schedule+0x165/0x360 [ 1619.224630][ T31] ? __pfx___schedule+0x10/0x10 [ 1619.229559][ T31] ? schedule+0x91/0x360 [ 1619.237677][ T31] schedule+0x165/0x360 [ 1619.241990][ T31] schedule_preempt_disabled+0x13/0x30 [ 1619.247500][ T31] __mutex_lock+0x724/0xe80 [ 1619.252145][ T31] ? __mutex_lock+0x51b/0xe80 [ 1619.256864][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1619.261969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1619.267045][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1619.272468][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1619.277896][ T31] rfkill_fop_open+0x12d/0x820 [ 1619.282795][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1619.288120][ T31] misc_open+0x2bc/0x330 [ 1619.293632][ T31] chrdev_open+0x4cc/0x5e0 [ 1619.298110][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1619.303115][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1619.308073][ T31] do_dentry_open+0xdf3/0x1970 [ 1619.312978][ T31] vfs_open+0x3b/0x340 [ 1619.317097][ T31] ? path_openat+0x2ecd/0x3830 [ 1619.322000][ T31] path_openat+0x2ee5/0x3830 [ 1619.326626][ T31] ? arch_stack_walk+0xfc/0x150 [ 1619.331615][ T31] ? do_syscall_64+0xfa/0x3b0 [ 1619.336339][ T31] ? __pfx_path_openat+0x10/0x10 [ 1619.341481][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.347612][ T31] do_filp_open+0x1fa/0x410 [ 1619.352230][ T31] ? __lock_acquire+0xab9/0xd20 [ 1619.358082][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1619.363557][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1619.368453][ T31] ? alloc_fd+0x64c/0x6c0 [ 1619.372950][ T31] do_sys_openat2+0x121/0x1c0 [ 1619.377663][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1619.382940][ T31] ? fput_close_sync+0x119/0x200 [ 1619.387905][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1619.393347][ T31] __x64_sys_openat+0x138/0x170 [ 1619.398237][ T31] do_syscall_64+0xfa/0x3b0 [ 1619.404000][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.409272][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.415735][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1619.420629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.426559][ T31] RIP: 0033:0x7f1b56d8d290 [ 1619.431073][ T31] RSP: 002b:00007ffd557aa7d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1619.439715][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1b56d8d290 [ 1619.447778][ T31] RDX: 0000000000000002 RSI: 00007f1b56e115b1 RDI: 00000000ffffff9c [ 1619.455825][ T31] RBP: 00007f1b56e115b1 R08: 0000000000000000 R09: 0000000000000000 [ 1619.463873][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1619.471901][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1619.479932][ T31] [ 1619.483484][ T31] INFO: task syz.6.10232:6986 blocked for more than 144 seconds. [ 1619.491643][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1619.499306][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1619.508109][ T31] task:syz.6.10232 state:D stack:24136 pid:6986 tgid:6986 ppid:30638 task_flags:0x400040 flags:0x00004004 [ 1619.526824][ T31] Call Trace: [ 1619.530248][ T31] [ 1619.533212][ T31] __schedule+0x16f5/0x4d00 [ 1619.537744][ T31] ? __lock_acquire+0xab9/0xd20 [ 1619.543029][ T31] ? schedule+0x165/0x360 [ 1619.547425][ T31] ? __pfx___schedule+0x10/0x10 [ 1619.552429][ T31] ? schedule+0x91/0x360 [ 1619.556737][ T31] schedule+0x165/0x360 [ 1619.561157][ T31] schedule_preempt_disabled+0x13/0x30 [ 1619.566661][ T31] __mutex_lock+0x724/0xe80 [ 1619.571292][ T31] ? kobject_put+0x43f/0x480 [ 1619.575915][ T31] ? __mutex_lock+0x51b/0xe80 [ 1619.580681][ T31] ? rfkill_unregister+0xc8/0x220 [ 1619.585745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1619.590911][ T31] ? __pfx_device_del+0x10/0x10 [ 1619.595817][ T31] rfkill_unregister+0xc8/0x220 [ 1619.600766][ T31] nfc_unregister_device+0x96/0x2a0 [ 1619.606003][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1619.611847][ T31] virtual_ncidev_close+0x56/0x90 [ 1619.616916][ T31] __fput+0x44c/0xa70 [ 1619.620984][ T31] task_work_run+0x1d1/0x260 [ 1619.625618][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1619.630884][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1619.636377][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1619.641867][ T31] do_syscall_64+0x2bd/0x3b0 [ 1619.646536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.651868][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.657965][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1619.662714][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.668654][ T31] RIP: 0033:0x7f542058e929 [ 1619.673177][ T31] RSP: 002b:00007ffe2878d538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1619.681681][ T31] RAX: 0000000000000000 RBX: 00007f54207b7ba0 RCX: 00007f542058e929 [ 1619.689681][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1619.697759][ T31] RBP: 00007f54207b7ba0 R08: 0000000000000218 R09: 0000001e2878d82f [ 1619.705800][ T31] R10: 00007f54207b7ac0 R11: 0000000000000246 R12: 0000000000164137 [ 1619.713879][ T31] R13: 00007f54207b6240 R14: ffffffffffffffff R15: 00007ffe2878d650 [ 1619.721980][ T31] [ 1619.725095][ T31] INFO: task syz.9.10233:6995 blocked for more than 144 seconds. [ 1619.734362][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1619.742327][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1619.751366][ T31] task:syz.9.10233 state:D stack:25272 pid:6995 tgid:6989 ppid:2470 task_flags:0x400140 flags:0x00004006 [ 1619.763692][ T31] Call Trace: [ 1619.767005][ T31] [ 1619.769943][ T31] __schedule+0x16f5/0x4d00 [ 1619.774689][ T31] ? __lock_acquire+0xab9/0xd20 [ 1619.779671][ T31] ? schedule+0x165/0x360 [ 1619.784141][ T31] ? __pfx___schedule+0x10/0x10 [ 1619.789047][ T31] ? schedule+0x91/0x360 [ 1619.793513][ T31] schedule+0x165/0x360 [ 1619.797729][ T31] schedule_preempt_disabled+0x13/0x30 [ 1619.803811][ T31] __mutex_lock+0x724/0xe80 [ 1619.808356][ T31] ? __lock_acquire+0xab9/0xd20 [ 1619.813300][ T31] ? __mutex_lock+0x51b/0xe80 [ 1619.818046][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1619.823509][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1619.828568][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.833878][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1619.839810][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1619.846277][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1619.852148][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1619.857326][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1619.863972][ T31] rfkill_set_block+0x1cf/0x440 [ 1619.868907][ T31] rfkill_fop_write+0x44b/0x570 [ 1619.873878][ T31] ? common_file_perm+0x199/0x200 [ 1619.878940][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1619.884541][ T31] ? security_kernfs_init_security+0x250/0x290 [ 1619.890847][ T31] ? rw_verify_area+0x258/0x650 [ 1619.895734][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1619.901243][ T31] vfs_write+0x27b/0xa90 [ 1619.905536][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1619.910769][ T31] ? __fget_files+0x2a/0x420 [ 1619.915424][ T31] ? __fget_files+0x2a/0x420 [ 1619.920061][ T31] ? __fget_files+0x3a0/0x420 [ 1619.924817][ T31] ? __fget_files+0x2a/0x420 [ 1619.929453][ T31] ksys_write+0x145/0x250 [ 1619.933905][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1619.938799][ T31] ? rcu_is_watching+0x15/0xb0 [ 1619.943671][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1619.948385][ T31] do_syscall_64+0xfa/0x3b0 [ 1619.952991][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.958234][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.964680][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1619.969413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.976902][ T31] RIP: 0033:0x7fc59238e929 [ 1619.982640][ T31] RSP: 002b:00007fc593130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1619.991166][ T31] RAX: ffffffffffffffda RBX: 00007fc5925b6080 RCX: 00007fc59238e929 [ 1619.999190][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 1620.007313][ T31] RBP: 00007fc592410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1620.015397][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1620.023590][ T31] R13: 0000000000000000 R14: 00007fc5925b6080 R15: 00007fffc714a778 [ 1620.031718][ T31] [ 1620.034785][ T31] INFO: task syz-executor:7129 blocked for more than 145 seconds. [ 1620.042917][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1620.050744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.059531][ T31] task:syz-executor state:D stack:27432 pid:7129 tgid:7129 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1620.071581][ T31] Call Trace: [ 1620.074889][ T31] [ 1620.077828][ T31] __schedule+0x16f5/0x4d00 [ 1620.082494][ T31] ? __lock_acquire+0xab9/0xd20 [ 1620.087416][ T31] ? schedule+0x165/0x360 [ 1620.091869][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.096793][ T31] ? schedule+0x91/0x360 [ 1620.101409][ T31] schedule+0x165/0x360 [ 1620.105641][ T31] schedule_preempt_disabled+0x13/0x30 [ 1620.111367][ T31] __mutex_lock+0x724/0xe80 [ 1620.115915][ T31] ? __mutex_lock+0x51b/0xe80 [ 1620.120884][ T31] ? rfkill_register+0x37/0x8e0 [ 1620.125785][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1620.131082][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1620.136434][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1620.143052][ T31] ? device_initialize+0x24b/0x440 [ 1620.148217][ T31] rfkill_register+0x37/0x8e0 [ 1620.152964][ T31] hci_register_dev+0x3f5/0x890 [ 1620.157858][ T31] vhci_create_device+0x39c/0x6e0 [ 1620.162971][ T31] vhci_write+0x3ce/0x4a0 [ 1620.167346][ T31] vfs_write+0x548/0xa90 [ 1620.171677][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1620.176567][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1620.181402][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1620.186749][ T31] ksys_write+0x145/0x250 [ 1620.191164][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1620.196078][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1620.200947][ T31] do_syscall_64+0xfa/0x3b0 [ 1620.205480][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.210763][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.216860][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1620.221634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.227568][ T31] RIP: 0033:0x7fc348d8d3a0 [ 1620.232061][ T31] RSP: 002b:00007ffd98ae9438 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1620.240547][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc348d8d3a0 [ 1620.248555][ T31] RDX: 0000000000000002 RSI: 00007ffd98ae944a RDI: 00000000000000ca [ 1620.256602][ T31] RBP: 00007fc348fb6738 R08: 0000000000000000 R09: 00007fc349aed6c0 [ 1620.264627][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1620.272653][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1620.280777][ T31] [ 1620.283833][ T31] INFO: task syz-executor:7443 blocked for more than 145 seconds. [ 1620.291705][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1620.299352][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.308086][ T31] task:syz-executor state:D stack:27840 pid:7443 tgid:7443 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1620.320238][ T31] Call Trace: [ 1620.323555][ T31] [ 1620.326506][ T31] __schedule+0x16f5/0x4d00 [ 1620.331084][ T31] ? __kasan_slab_free+0x62/0x70 [ 1620.336064][ T31] ? security_file_open+0xb1/0x270 [ 1620.341284][ T31] ? do_dentry_open+0x35e/0x1970 [ 1620.346266][ T31] ? __lock_acquire+0xab9/0xd20 [ 1620.351267][ T31] ? schedule+0x165/0x360 [ 1620.355642][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.360587][ T31] ? schedule+0x91/0x360 [ 1620.364881][ T31] schedule+0x165/0x360 [ 1620.369073][ T31] schedule_preempt_disabled+0x13/0x30 [ 1620.374619][ T31] __mutex_lock+0x724/0xe80 [ 1620.379153][ T31] ? __mutex_lock+0x51b/0xe80 [ 1620.383926][ T31] ? misc_open+0x51/0x330 [ 1620.388305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1620.393431][ T31] misc_open+0x51/0x330 [ 1620.397637][ T31] chrdev_open+0x4cc/0x5e0 [ 1620.402140][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1620.407128][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1620.412146][ T31] do_dentry_open+0xdf3/0x1970 [ 1620.417052][ T31] vfs_open+0x3b/0x340 [ 1620.421219][ T31] ? path_openat+0x2ecd/0x3830 [ 1620.426050][ T31] path_openat+0x2ee5/0x3830 [ 1620.430720][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1620.436375][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1620.441823][ T31] ? __pfx_path_openat+0x10/0x10 [ 1620.446795][ T31] ? __pfx___up_read+0x10/0x10 [ 1620.451630][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1620.456968][ T31] do_filp_open+0x1fa/0x410 [ 1620.461534][ T31] ? __lock_acquire+0xab9/0xd20 [ 1620.466433][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1620.471569][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1620.476472][ T31] ? alloc_fd+0x64c/0x6c0 [ 1620.480903][ T31] do_sys_openat2+0x121/0x1c0 [ 1620.485621][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1620.490898][ T31] ? fd_install+0x97/0x540 [ 1620.495347][ T31] ? fd_install+0x30d/0x540 [ 1620.499865][ T31] __x64_sys_openat+0x138/0x170 [ 1620.504778][ T31] do_syscall_64+0xfa/0x3b0 [ 1620.509305][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.514589][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.520821][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1620.525694][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.531676][ T31] RIP: 0033:0x7fb44f38d211 [ 1620.536139][ T31] RSP: 002b:00007ffc3d5b9a60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1620.544631][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb44f38d211 [ 1620.552680][ T31] RDX: 0000000000000002 RSI: 00007fb44f411506 RDI: 00000000ffffff9c [ 1620.560740][ T31] RBP: 00007fb44f411506 R08: 0000000000000000 R09: 00007fb4500ed6c0 [ 1620.568763][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1620.576812][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1620.584845][ T31] [ 1620.587871][ T31] INFO: task syz-executor:7444 blocked for more than 145 seconds. [ 1620.595729][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1620.603412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.612155][ T31] task:syz-executor state:D stack:28008 pid:7444 tgid:7444 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1620.625083][ T31] Call Trace: [ 1620.628384][ T31] [ 1620.631916][ T31] __schedule+0x16f5/0x4d00 [ 1620.636480][ T31] ? __kasan_slab_free+0x62/0x70 [ 1620.641656][ T31] ? security_file_open+0xb1/0x270 [ 1620.646980][ T31] ? do_dentry_open+0x35e/0x1970 [ 1620.652089][ T31] ? __lock_acquire+0xab9/0xd20 [ 1620.656983][ T31] ? schedule+0x165/0x360 [ 1620.661403][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.666332][ T31] ? schedule+0x91/0x360 [ 1620.670718][ T31] schedule+0x165/0x360 [ 1620.674916][ T31] schedule_preempt_disabled+0x13/0x30 [ 1620.680983][ T31] __mutex_lock+0x724/0xe80 [ 1620.685637][ T31] ? __mutex_lock+0x51b/0xe80 [ 1620.690401][ T31] ? misc_open+0x51/0x330 [ 1620.694771][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1620.699816][ T31] misc_open+0x51/0x330 [ 1620.704054][ T31] chrdev_open+0x4cc/0x5e0 [ 1620.708536][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1620.713572][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1620.718558][ T31] do_dentry_open+0xdf3/0x1970 [ 1620.723449][ T31] vfs_open+0x3b/0x340 [ 1620.727603][ T31] ? path_openat+0x2ecd/0x3830 [ 1620.732518][ T31] path_openat+0x2ee5/0x3830 [ 1620.737165][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1620.742770][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1620.748162][ T31] ? __pfx_path_openat+0x10/0x10 [ 1620.753224][ T31] ? __pfx___up_read+0x10/0x10 [ 1620.758017][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1620.763644][ T31] do_filp_open+0x1fa/0x410 [ 1620.768165][ T31] ? __lock_acquire+0xab9/0xd20 [ 1620.773113][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1620.778195][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1620.783138][ T31] ? alloc_fd+0x64c/0x6c0 [ 1620.787514][ T31] do_sys_openat2+0x121/0x1c0 [ 1620.792703][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1620.797950][ T31] ? fd_install+0x97/0x540 [ 1620.802472][ T31] ? fd_install+0x30d/0x540 [ 1620.807030][ T31] __x64_sys_openat+0x138/0x170 [ 1620.811998][ T31] do_syscall_64+0xfa/0x3b0 [ 1620.816533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.821818][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.827914][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1620.832774][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.838726][ T31] RIP: 0033:0x7f5da7b8d211 [ 1620.843428][ T31] RSP: 002b:00007fff9ccdfb10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1620.851976][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5da7b8d211 [ 1620.859989][ T31] RDX: 0000000000000002 RSI: 00007f5da7c11506 RDI: 00000000ffffff9c [ 1620.868052][ T31] RBP: 00007f5da7c11506 R08: 0000000000000000 R09: 00007f5da88ed6c0 [ 1620.876144][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1620.884224][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1620.892319][ T31] [ 1620.895392][ T31] [ 1620.895392][ T31] Showing all locks held in the system: [ 1620.903511][ T31] 1 lock held by khungtaskd/31: [ 1620.908398][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1620.918349][ T31] 4 locks held by kworker/u8:2/36: [ 1620.923541][ T31] #0: ffff88801b6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1620.934619][ T31] #1: ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1620.945241][ T31] #2: ffffffff8f7159d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1620.954691][ T31] #3: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1620.964912][ T31] 2 locks held by getty/5597: [ 1620.969589][ T31] #0: ffff888030c360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1620.979431][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1620.989695][ T31] 1 lock held by syz-executor/31734: [ 1620.995087][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1621.005584][ T31] 3 locks held by kworker/1:3/3962: [ 1621.011328][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.022480][ T31] #1: ffffc900049dfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.036171][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1621.047615][ T31] 2 locks held by syz-executor/6800: [ 1621.052999][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.061565][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1621.071677][ T31] 2 locks held by syz.6.10232/6986: [ 1621.076900][ T31] #0: ffff888027145100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1621.089433][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1621.100026][ T31] 2 locks held by syz.9.10233/6995: [ 1621.105340][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1621.115669][ T31] #1: ffff888027145100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1621.125507][ T31] 2 locks held by syz-executor/7129: [ 1621.130913][ T31] #0: ffff88805a9ac918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1621.141174][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1621.151305][ T31] 1 lock held by syz-executor/7443: [ 1621.156562][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.165211][ T31] 1 lock held by syz-executor/7444: [ 1621.170485][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.178994][ T31] 1 lock held by syz-executor/7462: [ 1621.184299][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.193119][ T31] 1 lock held by syz-executor/7465: [ 1621.198325][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.206847][ T31] 1 lock held by syz-executor/7476: [ 1621.212141][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.220706][ T31] 1 lock held by syz-executor/7480: [ 1621.225916][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.234443][ T31] 1 lock held by syz-executor/7498: [ 1621.239655][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.248228][ T31] 1 lock held by syz-executor/7500: [ 1621.253480][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.262007][ T31] 1 lock held by syz-executor/7509: [ 1621.267224][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.275742][ T31] 1 lock held by syz-executor/7511: [ 1621.281169][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1621.289688][ T31] [ 1621.292113][ T31] ============================================= [ 1621.292113][ T31] [ 1621.300693][ T31] NMI backtrace for cpu 0 [ 1621.300710][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1621.300735][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.300748][ T31] Call Trace: [ 1621.300757][ T31] [ 1621.300766][ T31] dump_stack_lvl+0x189/0x250 [ 1621.300793][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1621.300825][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.300850][ T31] ? __pfx__printk+0x10/0x10 [ 1621.300886][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1621.300919][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1621.300945][ T31] ? _printk+0xcf/0x120 [ 1621.300973][ T31] ? __pfx__printk+0x10/0x10 [ 1621.300999][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1621.301034][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1621.301067][ T31] watchdog+0xfee/0x1030 [ 1621.301096][ T31] ? watchdog+0x1de/0x1030 [ 1621.301124][ T31] kthread+0x70e/0x8a0 [ 1621.301158][ T31] ? __pfx_watchdog+0x10/0x10 [ 1621.301176][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.301207][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.301237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.301267][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.301298][ T31] ret_from_fork+0x3f9/0x770 [ 1621.301322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.301349][ T31] ? __switch_to_asm+0x39/0x70 [ 1621.301374][ T31] ? __switch_to_asm+0x33/0x70 [ 1621.301400][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.301430][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.301472][ T31] [ 1621.301481][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1621.458945][ C1] NMI backtrace for cpu 1 [ 1621.458962][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1621.458983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.458995][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1621.459029][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 09 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1621.459045][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1621.459061][ C1] RAX: 6e8dcdd289fe3000 RBX: ffffffff81979d58 RCX: 6e8dcdd289fe3000 [ 1621.459076][ C1] RDX: 0000000000000001 RSI: ffffffff8da4c121 RDI: ffffffff8be41880 [ 1621.459089][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1621.459102][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fc232f0 [ 1621.459115][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adeb40 [ 1621.459127][ C1] FS: 0000000000000000(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000 [ 1621.459141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.459154][ C1] CR2: 0000557ca882d000 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1621.459170][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 1621.459180][ C1] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1621.459192][ C1] Call Trace: [ 1621.459199][ C1] [ 1621.459206][ C1] default_idle+0x13/0x20 [ 1621.459226][ C1] default_idle_call+0x74/0xb0 [ 1621.459245][ C1] do_idle+0x1e8/0x510 [ 1621.459269][ C1] ? __pfx_do_idle+0x10/0x10 [ 1621.459298][ C1] cpu_startup_entry+0x44/0x60 [ 1621.459323][ C1] start_secondary+0x101/0x110 [ 1621.459350][ C1] common_startup_64+0x13e/0x147 [ 1621.459381][ C1] [ 1621.472758][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1621.472784][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1621.472813][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.472830][ T31] Call Trace: [ 1621.472841][ T31] [ 1621.472852][ T31] dump_stack_lvl+0x99/0x250 [ 1621.472887][ T31] ? __asan_memcpy+0x40/0x70 [ 1621.472914][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.472944][ T31] ? __pfx__printk+0x10/0x10 [ 1621.472988][ T31] panic+0x2db/0x790 [ 1621.473018][ T31] ? __pfx_panic+0x10/0x10 [ 1621.473042][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1621.473075][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1621.473114][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1621.473156][ T31] watchdog+0x102d/0x1030 [ 1621.473184][ T31] ? watchdog+0x1de/0x1030 [ 1621.473215][ T31] kthread+0x70e/0x8a0 [ 1621.473255][ T31] ? __pfx_watchdog+0x10/0x10 [ 1621.473277][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.473324][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.473359][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.473395][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.473430][ T31] ret_from_fork+0x3f9/0x770 [ 1621.473489][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.473526][ T31] ? __switch_to_asm+0x39/0x70 [ 1621.473555][ T31] ? __switch_to_asm+0x33/0x70 [ 1621.473585][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.473620][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.473669][ T31] [ 1621.786374][ T31] Kernel Offset: disabled [ 1621.790713][ T31] Rebooting in 86400 seconds..