last executing test programs: 16m35.292304856s ago: executing program 2 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x11, r4, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000001c0)=0x44) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"]) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x11, r4, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000380)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000001c0)=0x44) (async) 16m34.928341567s ago: executing program 2 (id=262): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9b82, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x3, 0x113002) ioctl$USBDEVFS_BULK(r2, 0xc0105502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0xfffffffe, 0x0}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 16m34.677603516s ago: executing program 2 (id=265): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0xb03b, 0x8001, 0xac0, 0x4, 0x400, 0x2ea, 0xfffffffffff80000, 0x7ff, 0x3, 0xb, 0x4, 0x240000000000, 0x0, 0x2, 0xffffffffffffffff, 0x8000], 0x8080000, 0x20044}) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 16m34.504250567s ago: executing program 2 (id=266): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000000)=""/52, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 16m34.387581752s ago: executing program 2 (id=268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x433c40, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000200)={0x0, "c14b91139a25a44a5399aad12e353b9640ab7a1bf1e4f8ffffffb8922660939cabebe4be890a00000000000000596c37924dcbd8ac85a9df639131fbffe82400", {0x0, 0xffffffffffffffff}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r11, 0x6f000) ioctl$USBDEVFS_CLEAR_HALT(r11, 0x80045515, &(0x7f00000003c0)={0xb}) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000480)={0xb, 0x1}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f00000001c0)={0x1000, 0x401, 0x1}) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="70b880f1db584c80d82d187381391506a9a7b398a48a27ebc400280edcf38807045ff18aff9a2240443a1c7a08dedf74effd43770129564d56a2a88feeaf6bd8c69f091f46ceaaaae81d821a5aa4c976ad520c77682d1964a1a65c091f0c15d92f0ad7a2f99f7767a0e9602c96186e138d96a87aa64417a53597a5dc2a0fd7cb37419d828ac85207122e811eb1e7cedef7813be3e25c2acfc0e76ce6d82c8d68496835408b421dd87bb564467df3710e634d98e499aebe48891c33f10501a2cf73e69cd2ef53ea0ef2b7542c"], 0xa) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) 16m34.092059586s ago: executing program 2 (id=270): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x7b8329f3, 0x4, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) read$FUSE(r1, 0x0, 0x24) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0x44f) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x240) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) r11 = dup(r4) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) 16m18.675197964s ago: executing program 32 (id=270): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x7b8329f3, 0x4, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) read$FUSE(r1, 0x0, 0x24) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0x44f) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x240) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) r11 = dup(r4) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) 10m30.644965128s ago: executing program 0 (id=2896): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r1) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 10m30.383168477s ago: executing program 0 (id=2899): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000380)={0x8, 0x4, @name="5e0b7c4fe5b9c9152f86292553c4536a0d7e1ef410570c3f84580df9e40cfe7b"}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000300)={0x1f, 0x7, 0x1, 0x3, 0xfffffffffffffe86, 0x7, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x0, 0x0, 0x31384142}}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x4112, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={r8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008aec1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r8}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000079a80038c0a69d74c8ff9300"/24]) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x5, r5, 0x5, 0xcb6, 0x4, 0x1ff, 0x1}) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6101, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r12, 0xc0096616, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r13, 0x7dfff000) ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000000000400"/24]) 10m29.910174829s ago: executing program 0 (id=2902): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 10m29.508990538s ago: executing program 0 (id=2905): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r2], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 10m29.292311834s ago: executing program 0 (id=2907): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(0x5) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x5, 0x0, [{0xa2e}, {0xb0d, 0x0, 0x9}, {0x118}, {0xb40, 0x0, 0x7fffffff}, {0x3b0, 0x0, 0x7ff}]}) 10m29.05256871s ago: executing program 0 (id=2908): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xf]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2, r6], [0x800]}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000001080)={0x48, 0x2, r7}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000080)={[0x1, 0x401, 0x8, 0x5, 0x8, 0x7, 0x8, 0x0, 0x638b, 0x8001, 0x75, 0x1000000, 0x2c00000, 0x79, 0x8, 0xc01, 0xeac8, 0xf, 0x8001, 0x10001, 0x6, 0xf, 0x9, 0xa, 0xfec4, 0x6, 0x6, 0xfffffe01, 0x8, 0x97, 0x4, 0x8, 0x9, 0x2, 0x0, 0x80, 0x2, 0x1, 0x5, 0x81, 0x400, 0x40, 0x7, 0xfffffffd, 0x6cfc, 0x2, 0x9, 0x40, 0x7, 0x398, 0x8, 0x6, 0x5, 0x5, 0xf, 0x77, 0x5fc, 0x6, 0x5, 0x0, 0x7, 0xbd0, 0xb4, 0x48000, 0xa26, 0x1, 0x1, 0x5, 0x10000, 0x89f, 0x401, 0x4, 0x7, 0x2, 0x6, 0x5, 0x8001, 0x9, 0x3, 0x7fffffff, 0x2, 0x4, 0x7fffffff, 0xc, 0x2, 0x6, 0x5, 0x12, 0x1, 0xc, 0x0, 0x401, 0x9, 0x2, 0xfffff1ec, 0x5c70, 0x400, 0x10001, 0xdd0c, 0x5, 0xa7, 0xee5, 0xfffffffd, 0x2, 0xd7, 0x3, 0xffff, 0x5, 0x2, 0x4, 0x5, 0x2, 0x7, 0x2, 0x7, 0xaec5, 0x96d5, 0x8, 0x6, 0xff, 0xce, 0xfff, 0xdb4, 0x80000001, 0x0, 0x8000, 0x7, 0x7, 0x3, 0x9, 0x5, 0x8b64, 0x10001, 0x7, 0xc, 0xc, 0x5, 0x5, 0x80000001, 0xffffffff, 0x3, 0x9, 0x11, 0x401, 0x6, 0x100, 0xff, 0x81, 0xfffffc01, 0x40, 0x6, 0x1, 0xd35, 0xa6, 0x1, 0x4, 0x3, 0xffffffff, 0xa, 0x9, 0xe19, 0x6, 0x1000, 0x80, 0x2, 0x77d, 0x2, 0xe, 0x1, 0x5ac, 0x7, 0x6, 0x5, 0x5, 0x2, 0xffff, 0x8, 0x3, 0x6, 0x1, 0x9, 0x6, 0x7f, 0x80000001, 0x0, 0x9, 0x5, 0xffff18ed, 0x9, 0x3, 0x81, 0x7fff, 0x7, 0x1000, 0x4, 0xcd2b, 0x6, 0x9, 0x8000, 0x5, 0x9, 0xffea, 0xf, 0x77, 0x2, 0xfffffffe, 0xffff, 0xd4ca, 0x800, 0x9, 0x5, 0xffffff00, 0xf, 0x7f, 0x0, 0x81, 0xb, 0x4, 0xe, 0x2, 0x1, 0x7, 0x1, 0xc40, 0x7, 0x5, 0x9, 0xfffffffa, 0x7f, 0x4, 0x1, 0x5, 0x4, 0xaf, 0x2cf0, 0x6, 0x7fff, 0x3, 0x2, 0x2, 0x4, 0xffff, 0x395, 0x3, 0x6, 0x2ee, 0x1c00000, 0x9, 0x6, 0x0, 0x5, 0x40, 0x8001, 0x78d29a54, 0x5, 0x4, 0x613b9b8a, 0x1d, 0x85e9, 0xa241, 0xffff, 0x80000000, 0x2, 0x9, 0x2, 0x2, 0x101, 0x4, 0x2d4, 0xa000, 0x6, 0x9, 0x0, 0x4, 0x4, 0x6, 0x1, 0x2, 0x5, 0x40, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x7, 0x80000001, 0x7, 0x5, 0xffffffff, 0x3, 0xfef2, 0x2, 0x5, 0x6, 0x9, 0x3e72, 0xc, 0x6, 0x100, 0xbc, 0x3, 0x1, 0x4, 0x4, 0x10, 0xffff0001, 0x5, 0x4, 0x3, 0x2f7, 0x0, 0x0, 0x5, 0x84b, 0x6, 0x0, 0xa4e, 0x1, 0x9, 0xfffffffb, 0xd7d2, 0xdc5, 0x0, 0x3ff, 0x5, 0x6, 0x10, 0x4, 0x81, 0x2, 0xa, 0x5, 0x2, 0xb, 0x9422, 0x800, 0x2, 0x6, 0x1b, 0x3, 0x0, 0x2, 0xffff, 0xffffd2e8, 0x7, 0x6, 0x2, 0x29, 0xb29, 0x3, 0x10000, 0x9, 0x4, 0x80000000, 0x2, 0x1, 0x80, 0x0, 0x3, 0x1, 0x200, 0x3ff, 0x80000001, 0x0, 0xc7, 0x1c7, 0xf, 0x1, 0x35f8fccf, 0x5a, 0x9, 0x6, 0x0, 0x9fc, 0x4ea, 0x10001, 0x6, 0x4, 0x400, 0x9, 0x7ff, 0x6, 0x2000, 0xe0, 0xa, 0x6, 0x7, 0x9, 0xfff, 0x7, 0x3, 0xffffffff, 0x4, 0x100, 0xb9, 0x4, 0x7fff, 0x2, 0x200, 0x2, 0x7ff, 0x5, 0x3, 0x2, 0x5, 0x7, 0x7, 0xffffffff, 0x6, 0x2, 0x4, 0x101, 0x0, 0x0, 0x6, 0x8, 0x6, 0x1, 0xc, 0x330, 0x7ca2, 0xc7, 0x1, 0x3, 0x1, 0x0, 0xc, 0x2, 0x1, 0xffffffff, 0x80000000, 0x1, 0xdb7a, 0x8, 0x7f, 0xc, 0x40, 0x8, 0xa, 0xffffffff, 0x8001, 0x7ff, 0x6, 0xc, 0xfffffff6, 0x5, 0x3, 0x0, 0xffffffff, 0x9, 0x1, 0x81, 0x4, 0xe, 0x7fffffff, 0x1, 0x3, 0x7, 0x1000, 0x2, 0x4, 0x9, 0x10, 0x3, 0x2, 0xffffffff, 0x0, 0x401, 0x9, 0x0, 0x3, 0x3, 0x4, 0x2, 0x6, 0xfffffffa, 0x4, 0x7f, 0x80, 0x5, 0xff, 0x1, 0x80000001, 0x6, 0x1, 0x400000, 0x5f, 0xcb9, 0xfffffffd, 0x5, 0x2, 0x3, 0x8, 0xbe, 0x1, 0x6b0b, 0x4, 0x3, 0x5, 0x5, 0x1, 0xfffffff7, 0x4, 0x2, 0x4, 0x43, 0xfffffffc, 0xda, 0x1ff, 0x1c00000, 0x84d, 0x7, 0x5a0, 0x7, 0x8, 0x6, 0x1, 0x5, 0x0, 0x1, 0x367bc6c9, 0xff, 0x7, 0xc, 0x0, 0xb9, 0x0, 0x8001, 0xc, 0xfff, 0x2, 0x401, 0x0, 0xffff, 0xd4d, 0x7fffffff, 0x6, 0x1, 0x336a, 0x5, 0xb, 0xffff, 0x4, 0x4bae, 0x7, 0xfc5, 0x80, 0xad, 0x6, 0x5, 0xa912, 0x1, 0x0, 0x5, 0x4, 0x7, 0x40a, 0x3, 0x7, 0x97, 0xfffffff7, 0x8, 0x0, 0x713, 0x5, 0x400, 0xc434, 0xb, 0x10, 0x400, 0x3, 0x0, 0x9, 0xffffff8c, 0xfff, 0x6, 0x0, 0x4d3, 0x3, 0xd2e, 0x9, 0x7, 0x5, 0x707, 0xa69c, 0x0, 0x2, 0xfffffe01, 0xe7, 0xfffffffc, 0xfff, 0x4, 0x2, 0x8000, 0x401, 0x3, 0x4, 0x0, 0x10000, 0xb9d7, 0x9, 0x2, 0x2, 0xfffffffb, 0x6, 0x4, 0x5b9, 0x0, 0xf47e, 0x2, 0x0, 0x6, 0x1, 0x2, 0x1, 0xc717, 0x8, 0x5, 0x9, 0x8, 0xd0, 0x7, 0xc, 0x4, 0xd, 0xffffffdd, 0x7, 0x4, 0x10, 0x1ff, 0x80, 0x1000, 0x2, 0x7, 0x6, 0x6, 0x4, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0xfffffff7, 0xc, 0x543, 0x4, 0x0, 0xda8, 0x4, 0x8, 0xb, 0xa, 0x0, 0x3, 0x1, 0x400, 0x7, 0x7f1, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x8, 0xfffffffb, 0xf20d, 0x100, 0x87, 0x2, 0x7, 0x5, 0x3, 0x2380, 0x80000000, 0x2, 0x6, 0x1, 0x2, 0x10, 0xfffffffb, 0x8, 0x0, 0x0, 0x9, 0x9, 0xffff, 0xd, 0x10000, 0x0, 0x7, 0x0, 0x0, 0xb, 0x4, 0x5, 0x7, 0x604feb69, 0x9, 0x3, 0x6, 0x7, 0x1, 0x7f, 0x6, 0xfffffffc, 0x9, 0x200, 0x8, 0x3, 0x0, 0xc2, 0x8f, 0x200, 0x0, 0x2, 0xc, 0xf, 0xa, 0x7f, 0x54d, 0xa, 0xfffffffb, 0xfffffff8, 0x0, 0xb, 0x1000, 0x6, 0x2, 0xfffffff9, 0xf, 0x5, 0x7d, 0x4, 0x9053, 0x2, 0x0, 0x9, 0x9f, 0x2, 0x80000001, 0x0, 0x6, 0x9, 0x5, 0x7f, 0x44c7, 0x2, 0x5ed1, 0x7f, 0x10, 0x0, 0x2, 0x800, 0x3, 0xb52, 0x80000000, 0x0, 0x1, 0x4, 0xffff7fff, 0x5, 0x2, 0x6, 0x3, 0xffffff06, 0x4, 0x9, 0x7fff, 0xfe, 0x3ff, 0x8, 0x8, 0x5, 0xee3, 0xfffffff8, 0x6d, 0x821, 0x4, 0xfffff801, 0x4a, 0x9, 0x1, 0x7, 0x4, 0x8001, 0xffffff27, 0x6, 0x8, 0x2, 0xfffffff8, 0x4, 0x5, 0xc5, 0x200, 0x4, 0x7, 0x3a, 0x1, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x0, 0x10, 0x2, 0x7f, 0xfffffffa, 0x1000, 0x8, 0x2639, 0x3, 0xc, 0xffff7fff, 0xfffffffa, 0x4, 0x10, 0xffffffff, 0x2, 0x2, 0x0, 0xd96, 0xb000, 0x1c49, 0xcb9c, 0x1, 0x1, 0x6, 0x1b09, 0xd25, 0x7, 0x5, 0x1, 0xfffffff1, 0x4, 0x10000, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x6, 0x4, 0xfff, 0x3, 0x7fff, 0x5, 0x100, 0x0, 0x6, 0x8fa, 0x9, 0x10, 0x8001, 0x9, 0x35, 0x0, 0x8001, 0x7, 0x7fff, 0x33805a66, 0x3, 0x8001, 0x7, 0x9, 0x3, 0x1, 0x4, 0x101, 0x3ff, 0x0, 0x4, 0x5, 0xfffffffb, 0x80fe, 0x101, 0x6, 0x100, 0x81, 0x3, 0xf38, 0x3, 0x1, 0x2, 0xffffffff, 0x0, 0x1, 0x800, 0x5, 0x7, 0x0, 0x7, 0x1, 0x2, 0xfffffffe, 0x1, 0x0, 0x3, 0xfffffff9, 0x0, 0x4, 0x6, 0x9, 0x7, 0x7, 0x9, 0x2, 0xed3, 0xd, 0xc, 0x6, 0x8ac, 0x8b, 0x6, 0x2, 0x7, 0x2e08, 0x8, 0x8001, 0x0, 0x1f2, 0x0, 0x3, 0x7, 0x7deee1e3, 0x4, 0x3, 0x100, 0x8, 0x7, 0x1, 0x0, 0x5359, 0x9, 0x9, 0x6, 0xcf, 0xffe00000, 0x2, 0x6, 0x3, 0x84, 0x0, 0x1, 0x0, 0x2, 0x3, 0x8, 0xd, 0x1, 0x6, 0x400, 0x8, 0x6, 0x5, 0x5, 0xf02, 0xf, 0x6, 0x1, 0x4, 0x6, 0x1, 0x1, 0x0, 0x3, 0x80000001, 0x4, 0x3, 0xbf, 0x6, 0x4981, 0x8, 0x7ff, 0x1ff, 0x0, 0x4, 0xffffffff, 0x0, 0x8000, 0xfffffffb, 0x6, 0x0, 0x7, 0x6, 0x3, 0x80000000, 0xfffff001, 0x3, 0x3, 0x7ff, 0x7a65, 0x2, 0x6, 0x80, 0xc2a5, 0x3, 0x4, 0x80000001, 0x5, 0x9, 0x8, 0x200, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x15, 0x400, 0x7fff, 0x7, 0x5, 0x7, 0xff74, 0x100, 0x400, 0x3]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 10m13.881885908s ago: executing program 33 (id=2908): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xf]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2, r6], [0x800]}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000001080)={0x48, 0x2, r7}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000080)={[0x1, 0x401, 0x8, 0x5, 0x8, 0x7, 0x8, 0x0, 0x638b, 0x8001, 0x75, 0x1000000, 0x2c00000, 0x79, 0x8, 0xc01, 0xeac8, 0xf, 0x8001, 0x10001, 0x6, 0xf, 0x9, 0xa, 0xfec4, 0x6, 0x6, 0xfffffe01, 0x8, 0x97, 0x4, 0x8, 0x9, 0x2, 0x0, 0x80, 0x2, 0x1, 0x5, 0x81, 0x400, 0x40, 0x7, 0xfffffffd, 0x6cfc, 0x2, 0x9, 0x40, 0x7, 0x398, 0x8, 0x6, 0x5, 0x5, 0xf, 0x77, 0x5fc, 0x6, 0x5, 0x0, 0x7, 0xbd0, 0xb4, 0x48000, 0xa26, 0x1, 0x1, 0x5, 0x10000, 0x89f, 0x401, 0x4, 0x7, 0x2, 0x6, 0x5, 0x8001, 0x9, 0x3, 0x7fffffff, 0x2, 0x4, 0x7fffffff, 0xc, 0x2, 0x6, 0x5, 0x12, 0x1, 0xc, 0x0, 0x401, 0x9, 0x2, 0xfffff1ec, 0x5c70, 0x400, 0x10001, 0xdd0c, 0x5, 0xa7, 0xee5, 0xfffffffd, 0x2, 0xd7, 0x3, 0xffff, 0x5, 0x2, 0x4, 0x5, 0x2, 0x7, 0x2, 0x7, 0xaec5, 0x96d5, 0x8, 0x6, 0xff, 0xce, 0xfff, 0xdb4, 0x80000001, 0x0, 0x8000, 0x7, 0x7, 0x3, 0x9, 0x5, 0x8b64, 0x10001, 0x7, 0xc, 0xc, 0x5, 0x5, 0x80000001, 0xffffffff, 0x3, 0x9, 0x11, 0x401, 0x6, 0x100, 0xff, 0x81, 0xfffffc01, 0x40, 0x6, 0x1, 0xd35, 0xa6, 0x1, 0x4, 0x3, 0xffffffff, 0xa, 0x9, 0xe19, 0x6, 0x1000, 0x80, 0x2, 0x77d, 0x2, 0xe, 0x1, 0x5ac, 0x7, 0x6, 0x5, 0x5, 0x2, 0xffff, 0x8, 0x3, 0x6, 0x1, 0x9, 0x6, 0x7f, 0x80000001, 0x0, 0x9, 0x5, 0xffff18ed, 0x9, 0x3, 0x81, 0x7fff, 0x7, 0x1000, 0x4, 0xcd2b, 0x6, 0x9, 0x8000, 0x5, 0x9, 0xffea, 0xf, 0x77, 0x2, 0xfffffffe, 0xffff, 0xd4ca, 0x800, 0x9, 0x5, 0xffffff00, 0xf, 0x7f, 0x0, 0x81, 0xb, 0x4, 0xe, 0x2, 0x1, 0x7, 0x1, 0xc40, 0x7, 0x5, 0x9, 0xfffffffa, 0x7f, 0x4, 0x1, 0x5, 0x4, 0xaf, 0x2cf0, 0x6, 0x7fff, 0x3, 0x2, 0x2, 0x4, 0xffff, 0x395, 0x3, 0x6, 0x2ee, 0x1c00000, 0x9, 0x6, 0x0, 0x5, 0x40, 0x8001, 0x78d29a54, 0x5, 0x4, 0x613b9b8a, 0x1d, 0x85e9, 0xa241, 0xffff, 0x80000000, 0x2, 0x9, 0x2, 0x2, 0x101, 0x4, 0x2d4, 0xa000, 0x6, 0x9, 0x0, 0x4, 0x4, 0x6, 0x1, 0x2, 0x5, 0x40, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x7, 0x80000001, 0x7, 0x5, 0xffffffff, 0x3, 0xfef2, 0x2, 0x5, 0x6, 0x9, 0x3e72, 0xc, 0x6, 0x100, 0xbc, 0x3, 0x1, 0x4, 0x4, 0x10, 0xffff0001, 0x5, 0x4, 0x3, 0x2f7, 0x0, 0x0, 0x5, 0x84b, 0x6, 0x0, 0xa4e, 0x1, 0x9, 0xfffffffb, 0xd7d2, 0xdc5, 0x0, 0x3ff, 0x5, 0x6, 0x10, 0x4, 0x81, 0x2, 0xa, 0x5, 0x2, 0xb, 0x9422, 0x800, 0x2, 0x6, 0x1b, 0x3, 0x0, 0x2, 0xffff, 0xffffd2e8, 0x7, 0x6, 0x2, 0x29, 0xb29, 0x3, 0x10000, 0x9, 0x4, 0x80000000, 0x2, 0x1, 0x80, 0x0, 0x3, 0x1, 0x200, 0x3ff, 0x80000001, 0x0, 0xc7, 0x1c7, 0xf, 0x1, 0x35f8fccf, 0x5a, 0x9, 0x6, 0x0, 0x9fc, 0x4ea, 0x10001, 0x6, 0x4, 0x400, 0x9, 0x7ff, 0x6, 0x2000, 0xe0, 0xa, 0x6, 0x7, 0x9, 0xfff, 0x7, 0x3, 0xffffffff, 0x4, 0x100, 0xb9, 0x4, 0x7fff, 0x2, 0x200, 0x2, 0x7ff, 0x5, 0x3, 0x2, 0x5, 0x7, 0x7, 0xffffffff, 0x6, 0x2, 0x4, 0x101, 0x0, 0x0, 0x6, 0x8, 0x6, 0x1, 0xc, 0x330, 0x7ca2, 0xc7, 0x1, 0x3, 0x1, 0x0, 0xc, 0x2, 0x1, 0xffffffff, 0x80000000, 0x1, 0xdb7a, 0x8, 0x7f, 0xc, 0x40, 0x8, 0xa, 0xffffffff, 0x8001, 0x7ff, 0x6, 0xc, 0xfffffff6, 0x5, 0x3, 0x0, 0xffffffff, 0x9, 0x1, 0x81, 0x4, 0xe, 0x7fffffff, 0x1, 0x3, 0x7, 0x1000, 0x2, 0x4, 0x9, 0x10, 0x3, 0x2, 0xffffffff, 0x0, 0x401, 0x9, 0x0, 0x3, 0x3, 0x4, 0x2, 0x6, 0xfffffffa, 0x4, 0x7f, 0x80, 0x5, 0xff, 0x1, 0x80000001, 0x6, 0x1, 0x400000, 0x5f, 0xcb9, 0xfffffffd, 0x5, 0x2, 0x3, 0x8, 0xbe, 0x1, 0x6b0b, 0x4, 0x3, 0x5, 0x5, 0x1, 0xfffffff7, 0x4, 0x2, 0x4, 0x43, 0xfffffffc, 0xda, 0x1ff, 0x1c00000, 0x84d, 0x7, 0x5a0, 0x7, 0x8, 0x6, 0x1, 0x5, 0x0, 0x1, 0x367bc6c9, 0xff, 0x7, 0xc, 0x0, 0xb9, 0x0, 0x8001, 0xc, 0xfff, 0x2, 0x401, 0x0, 0xffff, 0xd4d, 0x7fffffff, 0x6, 0x1, 0x336a, 0x5, 0xb, 0xffff, 0x4, 0x4bae, 0x7, 0xfc5, 0x80, 0xad, 0x6, 0x5, 0xa912, 0x1, 0x0, 0x5, 0x4, 0x7, 0x40a, 0x3, 0x7, 0x97, 0xfffffff7, 0x8, 0x0, 0x713, 0x5, 0x400, 0xc434, 0xb, 0x10, 0x400, 0x3, 0x0, 0x9, 0xffffff8c, 0xfff, 0x6, 0x0, 0x4d3, 0x3, 0xd2e, 0x9, 0x7, 0x5, 0x707, 0xa69c, 0x0, 0x2, 0xfffffe01, 0xe7, 0xfffffffc, 0xfff, 0x4, 0x2, 0x8000, 0x401, 0x3, 0x4, 0x0, 0x10000, 0xb9d7, 0x9, 0x2, 0x2, 0xfffffffb, 0x6, 0x4, 0x5b9, 0x0, 0xf47e, 0x2, 0x0, 0x6, 0x1, 0x2, 0x1, 0xc717, 0x8, 0x5, 0x9, 0x8, 0xd0, 0x7, 0xc, 0x4, 0xd, 0xffffffdd, 0x7, 0x4, 0x10, 0x1ff, 0x80, 0x1000, 0x2, 0x7, 0x6, 0x6, 0x4, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0xfffffff7, 0xc, 0x543, 0x4, 0x0, 0xda8, 0x4, 0x8, 0xb, 0xa, 0x0, 0x3, 0x1, 0x400, 0x7, 0x7f1, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x8, 0xfffffffb, 0xf20d, 0x100, 0x87, 0x2, 0x7, 0x5, 0x3, 0x2380, 0x80000000, 0x2, 0x6, 0x1, 0x2, 0x10, 0xfffffffb, 0x8, 0x0, 0x0, 0x9, 0x9, 0xffff, 0xd, 0x10000, 0x0, 0x7, 0x0, 0x0, 0xb, 0x4, 0x5, 0x7, 0x604feb69, 0x9, 0x3, 0x6, 0x7, 0x1, 0x7f, 0x6, 0xfffffffc, 0x9, 0x200, 0x8, 0x3, 0x0, 0xc2, 0x8f, 0x200, 0x0, 0x2, 0xc, 0xf, 0xa, 0x7f, 0x54d, 0xa, 0xfffffffb, 0xfffffff8, 0x0, 0xb, 0x1000, 0x6, 0x2, 0xfffffff9, 0xf, 0x5, 0x7d, 0x4, 0x9053, 0x2, 0x0, 0x9, 0x9f, 0x2, 0x80000001, 0x0, 0x6, 0x9, 0x5, 0x7f, 0x44c7, 0x2, 0x5ed1, 0x7f, 0x10, 0x0, 0x2, 0x800, 0x3, 0xb52, 0x80000000, 0x0, 0x1, 0x4, 0xffff7fff, 0x5, 0x2, 0x6, 0x3, 0xffffff06, 0x4, 0x9, 0x7fff, 0xfe, 0x3ff, 0x8, 0x8, 0x5, 0xee3, 0xfffffff8, 0x6d, 0x821, 0x4, 0xfffff801, 0x4a, 0x9, 0x1, 0x7, 0x4, 0x8001, 0xffffff27, 0x6, 0x8, 0x2, 0xfffffff8, 0x4, 0x5, 0xc5, 0x200, 0x4, 0x7, 0x3a, 0x1, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x0, 0x10, 0x2, 0x7f, 0xfffffffa, 0x1000, 0x8, 0x2639, 0x3, 0xc, 0xffff7fff, 0xfffffffa, 0x4, 0x10, 0xffffffff, 0x2, 0x2, 0x0, 0xd96, 0xb000, 0x1c49, 0xcb9c, 0x1, 0x1, 0x6, 0x1b09, 0xd25, 0x7, 0x5, 0x1, 0xfffffff1, 0x4, 0x10000, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x6, 0x4, 0xfff, 0x3, 0x7fff, 0x5, 0x100, 0x0, 0x6, 0x8fa, 0x9, 0x10, 0x8001, 0x9, 0x35, 0x0, 0x8001, 0x7, 0x7fff, 0x33805a66, 0x3, 0x8001, 0x7, 0x9, 0x3, 0x1, 0x4, 0x101, 0x3ff, 0x0, 0x4, 0x5, 0xfffffffb, 0x80fe, 0x101, 0x6, 0x100, 0x81, 0x3, 0xf38, 0x3, 0x1, 0x2, 0xffffffff, 0x0, 0x1, 0x800, 0x5, 0x7, 0x0, 0x7, 0x1, 0x2, 0xfffffffe, 0x1, 0x0, 0x3, 0xfffffff9, 0x0, 0x4, 0x6, 0x9, 0x7, 0x7, 0x9, 0x2, 0xed3, 0xd, 0xc, 0x6, 0x8ac, 0x8b, 0x6, 0x2, 0x7, 0x2e08, 0x8, 0x8001, 0x0, 0x1f2, 0x0, 0x3, 0x7, 0x7deee1e3, 0x4, 0x3, 0x100, 0x8, 0x7, 0x1, 0x0, 0x5359, 0x9, 0x9, 0x6, 0xcf, 0xffe00000, 0x2, 0x6, 0x3, 0x84, 0x0, 0x1, 0x0, 0x2, 0x3, 0x8, 0xd, 0x1, 0x6, 0x400, 0x8, 0x6, 0x5, 0x5, 0xf02, 0xf, 0x6, 0x1, 0x4, 0x6, 0x1, 0x1, 0x0, 0x3, 0x80000001, 0x4, 0x3, 0xbf, 0x6, 0x4981, 0x8, 0x7ff, 0x1ff, 0x0, 0x4, 0xffffffff, 0x0, 0x8000, 0xfffffffb, 0x6, 0x0, 0x7, 0x6, 0x3, 0x80000000, 0xfffff001, 0x3, 0x3, 0x7ff, 0x7a65, 0x2, 0x6, 0x80, 0xc2a5, 0x3, 0x4, 0x80000001, 0x5, 0x9, 0x8, 0x200, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x15, 0x400, 0x7fff, 0x7, 0x5, 0x7, 0xff74, 0x100, 0x400, 0x3]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 9m10.89992957s ago: executing program 5 (id=3583): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000042c0)={0x8, 0x80008, "e7249bdabd0aabc94fc7311befe6e691d5eb0000000000ff", {0x0, 0x64}, 0x3}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) close(0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9m10.201339472s ago: executing program 5 (id=3590): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5450c1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x980, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000300)={0x6, 0xf1, 0x68, 0x8080}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r12, 0xae44, 0x1) 9m9.168117919s ago: executing program 5 (id=3600): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x3, @vbi={0x5, 0xa, 0x2, 0x59555956, [0x1, 0xa], [0xfff, 0xf4], 0x1}}) (async) read(r0, &(0x7f0000000040)=""/171, 0xab) 9m8.88322691s ago: executing program 5 (id=3603): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0xc}, {0x6}]}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc0305602, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x2000]}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc0305602, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x2000]}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, "0000000000e0ff00", "00aa071e", "042000", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0xe4a, 0x4e3bf1d1, 0x10, 0x10001, 0x0, 0x7d, "451b50acfe00060000000000909a25bb", 0x4, 0x4, 0x8, 0x20, 0x2, 0x7}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4010, r4, 0x63b8000) 9m7.584390136s ago: executing program 5 (id=3614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x3}]}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x4010, r4, 0xf4eab000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 9m6.900173534s ago: executing program 5 (id=3620): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001080)=0x19) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001080)=0x19) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000021c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0xffffffffffffffff, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x4100000001, 0x9, 0x1, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xfffffd28) read$FUSE(r8, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r9) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000080)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000080)=0xffff0018) ioctl$SNDCTL_DSP_SPEED(r11, 0x8004500b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x13, r10, 0x5afac000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x13, r10, 0x5afac000) 8m51.541890127s ago: executing program 34 (id=3620): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001080)=0x19) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001080)=0x19) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000021c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0xffffffffffffffff, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x4100000001, 0x9, 0x1, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xfffffd28) read$FUSE(r8, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r9) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000080)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000080)=0xffff0018) ioctl$SNDCTL_DSP_SPEED(r11, 0x8004500b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x13, r10, 0x5afac000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x13, r10, 0x5afac000) 8m11.903290054s ago: executing program 4 (id=4035): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10d001, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x3) pwritev(r0, &(0x7f00000010c0)=[{&(0x7f0000000080)="c77e7843a4f3b9a311fa36b096f9dc99b00719d0ca8a3df6d50a9008afa8a4fc72823544fa96cc8935a6e81f4c6c5ce979d3163c2ddee5c55d7e6c1cac8ff320d6970a6da08f505fbfb05e648731b081989fe7dbca5d79e6e10950c4620ec821b9ef6cb4232658882113c4de0d6830a02d13671f91ab3c4388d4ebcafdfb67fdb19c12d79e843c022e4dfd7fad53611679f36600ff8f487f0fa030e2cbd86b8243f546bf367835dc7b05657951fd8b44812a22e51e0f70174ff5d0fdc50f07447d827a6d9e35cc79eeac49715ccfbbe7ec44bc7f28b1c5c55ef2332d36afb1b0390e89d37a674d50925a9bb43cd234a5a1e65a9b50e0e2d513bcceeca727e1d2edbe82595ef07060fe14b8205b2d7bd338df5e3e5b52d542d08e8a7720dbdc1ae19c641b8f263d051e2135dc585887c93c5bcdf306ae368d5846a5c2009070abe903af07a7bd0cd0d89272c2b96fa402e259cc03a05838b9094dfc302d475687f6d0c58a725ab6cf8a407643110b23aef20efbe8e3aeed9ea4c65ba55afefef102860f7ce94495b4185ff4eda46f1710643debe0f13a3ad90a9b572a20b9229f572b99af561f77d3e940bbe01bc62af604d4553cdae07bfba87317296ca2d5aeae0fe1d5701caee6c619e76c3f9341c7f251ee73634d264f30d63369623dca886903a4e07904574eb0aa3155b7dfe92462b7a06fa35992b3b5ba35ea65453bd7be229ff11453940c5f1d77189bc2611113c8d15ced504bc4037fd9033fa236e4e9fe1180632026af519b23031f9094b951a336efb497527bfb1f22f7c16ce7db448f0296c7f84bdc318e60c4babe517638178564c7f4abda0c7175619723766b815b9d71f759fb49b440fe922a09e1068f0fa18f15af518cd91a4925ebb60795312752f67faf3823448ce5a711b6e778c518c33d5bcf0af233847ba17d988feea86eab8c70419afa8a69ffdf5bd13abb3f3e06640dd00559dc3a041eefe3e7e4e67089796332689d0e6d5225929d4303c2152f7381ad6037bab2e4e468a791f26404298cf7a04f559d2e56e0bdc453447ccf03a46fc18467efe18cfc2e22612d19a877d6e7d9350eb91b3386e7f08abc02e007bd01846be302301a3c28a207de938d356f91baca3a714df136d2fa8a2228a67e3a3228e585a185c959b3d041cec7da77b15701e8e5d697d45ec9f51188c19f2b5377aacd5e99ff7b08ec9c903f34ba71e3543855a9efc591d18e12f7af4bdf99f8c3cc9cccd73fb81e6e0624c2a3f42b31b652b56fad0ef6a17d728044f0ff1b59a4b53d9069ea4ee6388261d07b75206afa67a0e385a5463411219a724774714be5a8faa34786992d27b258308b04c978bec49f8f9a537d162a1392daf2e1586c2751d00c636a13ac23918e468ad29219b816617896af9f88547fb8f53050e51ac6327a5af0f458769adf63ab6f157f59c3e7946da7abc1a7c2581966026fe551b763d4dd81d044a029bd9f39cce4b678daaf6a31fde99c5ad06a6af930810199bdb80afb11a4b653749d83f326cd86f73f8a77952fd3db80399cf4a38568491a0aeab59d9f0b8139a305cdd0ab60903fa70cb62d7b111817ca4dada40705175e34a0fc5928c8c9d074c5f6e0ad5c60fc19ea7bee68fb43d7ae02bf7566d9e3dfc909ceb08fcf06b80e654dc4d3f295e351ef926f1fcaaf09a489f899e801d9e75fa642ad54fa07de58888d1ccde5e568a5e1f2afe34518c33608b8e7402d94de280f5078aae37869cc31a8c40245d7d81c60741599491125620b09545e4d0fede9c20995fd11511c21e36e6064dbdc555b602c04c3f0d4b447d49aa2e9767a8d2ac94071a8abcab18baa3cffd68be849831f00e34ad3f5d73d6dc1614ffb5737263ae625e3e1ce0402625ccffe590ef93a0c0da72967847317c8e2ffc32971f6b9c3f16676bcd009a29aca0e4cfd3f31f33ff86eb8d39268292dc2d0b0b31e92c412efb95d964e40bad12b41323d75a919fedb6da61aff9ccbfee71f872c979225fe701d733155f6a8f0d18750de8a3ae1b1eea447642dd0ae20ee0f64fe460d8d1f4e2c6f9ad29ba635c92d5459e52e20b44f3173e6cb95f04f37d8fb66dea93542aec9ee9b6386ca5bcb5bdc6c5e4b31dd7ffe87a184f6db4c7698c31d9e7c8e5af0deffe82f4aa7c3dc85c97fb80a5489a58e3a4446623dbc55b5d4d627c2fe5603748b5d1dfb66a00526a7b3ef3851ca58dbc426c2f4c41d852fe12ff8109a542c644d5e801968cbb34b33e1150f4e87b37cd4826a2284ba578c1fe373d42cb467fe9c82de1e527a735115438335de4e31981238639362bc01cc7d324ef695c81d7a3ffd73bb26c8668eb4672cf8412e43eda2f9f11eaa24cb5cc333d7326123f9ec125c6d73394ef20ded0e24d61c9c939ff04eb18e939c9356ef9af99525974e8eafc99dd1d57cf09970f53eed19444cca3d87b19ce954d9d0326bb81acf1c0d78fa3cb73f5be730e5345c63f794b13016c53273128989d13235bf4c2854008e0ecd8e59935b2911498b5801f06c21c90fa8aef2d3d4a05dc487a36717b09737fa8941229eebcad8229bba3ecca3f005e7b9a42054041f8846533b921747a24203be3d8f8e266de18774b80814700f6ac6ad5f83e2257220119943cefed2571db08e259f8b05f21abc68fc39ce3458b92aee713626f3ed1d5dc78fd1adfe1ebfd944dceaee3d9ebbd757667cd21696ab684e35d4b028e72ab58a0c9e5233285326cf70fef38007f4cab5d12d113f6ecb225497d0853c1b4eb6375e05dd990e030a5bc15754295dabe0542ecbecd41d0607614131c7fe974ca14c8e8702ff09fdaa618bc86b6e15960b0da715d118ab8ab492fad8833e4206b711cbef89f504cea3471a281b035a102110c0fa2ed942a4d673fb5e08b349397548d1668f0fba4d38aa7b4a98089dcdb11e6dd287cc00c8aae155d713ee22a3d4897a63740e52baf4831d2aebafcf7b64b2b286c3f4c6a0caa443346bdb9c06a4a51335966f61ee6aaedca92ba501f7e991514d238878e657f5d588dc475ba8ef928fbf382538cd44870c6c9cc7f913c410b6c8237857f9840006d0af0cc2ce9c075077172742faf9c6ce4e3d7cdb325d969f1ceddae6a528a9399382aed89413ae28a559c6a66c68a532b62300af6d64f9bb94e32bcaa61542bf54b9102a2a2913a22460b4f1974605d5fd5890652601087887c93143f6a0a452aa73903a71593fe4da76f412989d10006d12d23150f3c535a10c2589a4bff1f8a9bbb797b100bb09551fc628d0549f10cd3484a3e3a96a87bf7fd35c848ac05c1733ede26d001dd687a2a4da79c3e6989532fa1e07d730ed71f8253f687f26f630b4758002b024fedadbc383d56e58fdd68f95ece691fda603a1b738719719a0b07dcb03c67f8df869febabf727099177473a7207d44a9d15b63282a1f86e8a86070bb4f3f6700a2ce0fc5ba5ab8c28f94f71ced4a43550f64e8269108a85949b074af9dedcca0659dee44f797344d48c59875c895fc10e7f7dab280d15bd9db59a9101d0d35f4cb699301eba4eaf12dae9158cc0282908f753af6605ae57bd985263fba1bb00da7cabbf1856ac511a2462b7b8504262b6cf619e5c034ec34e085aa2e21e78852ca123b1a28930080494cd2196377052e87f62a3dcc303296d1d8cccbd1452f38f289bf88d106e51689c8864883ee7ba833a7a04d2f8e0cbdbe1cd47500d619a31f7667fcf3e2af9a4f11330f86a212711e2cb31e6859486ab7058ad9ce622e636336135c04711b126339b91b99b4e5ec5f7f36fe836a53c5712a62954af407be0d456ab5e21fa2a41393104036b4f1198766c3d66585fefbf6fa6f942292ef568aa5d34a15fbb78403745675a7867e1eee8826662b4f8c09d5250df31db8278ccf1f1d137fc45967457820a324e11decbdeee1eafb6fa4f0c2dcba5426680ad207a69c7df15a20b4ca1702027218b24f2a94a5a196ad13ffa425f4040f98b24fd0c5bcc05128da1fea0485599b86e143e7ad3e05c03ed6bfd4025dfd448c8ba853e7ab1cd413350793296831f1d24da8c0bbbb027e72aa38c1fc59c1badc2d5f82a99cb2e5cc9f0c2bd0ee05c6f49b4e452c9cf0a1b3d3a8430bc8cbc0865d1cc73ef2dbefbcf85937eb8a2ebd78ccb623e2096fe18f32772a97269b889ad2bb74012410774750ec5ba424809d2224f42f066aa91d624698d5c8089142e7d8f0f3622a46acd4defcd286905c7ab490965a2c5d0cbbad1557348140593c27137787ec43e6d99be8a47d49cd2d716262f8e73248483206ad01c7b53470e28be2c0baccb39b45b3323385b9f9a79e69be1937f0cd2e8699b369643ec69ff03eb817ed18d99c39cbfb5cc43d9abd990ca99a47ab773c91ad01b5789414a366d17aadac7aaf29aaab2f046d665b29ffc61c1a1d8ede0c76ba8f0f8db969234da1e0f5737bac416c44834d7fec77dec5e0079a569c8e5ce7d1007f92d5fe0fed4e4666618146c484a1331df416242c43c6b4e413f17cbf0b2152ca3103b75b73edb1bf40e26bdb76c6a6bb40b1e0a98903420563144e539f83040f082f1a2556b6c6446a97025e8cccfd95a909d78e335559f71ca680939ff43e95025c605ebea917f3cc6d88627ed6bf7891ed9cda0e211372f7beebc7502d605acfe0de182178206f3e52e72b67d5aac195d8f56a24d4a469277da3192144af282ef44d1b3a8ec049bf0b3ae22a3d1eb7debab46e266f5ca7a0137f04ebc5d4d181d131b875c09879ba64bef701ea14462d9837388484bd379b8d64ab994e9bf2e028ba8292099924c0b90bcf66966e5a2690bcdb3bfff10a8a181d43ee8043277274f087777830d860125ce085c1f1ea83182f9a95cf922d149f8707035b610820521369b8ce6e08ccbe0e51d34129e6f39a35a82dc195717afbe4e94d21ff67b799729a86b763c5af00c6341f3e9030e0f734e119f2050c700687a4125f7440a072d49815907120360f82704f984e75818c8a1dd78b5f3bd6d6dd69f1b04eea10b7892474e0dd88741bcf630ea01abbfef4617c3a466c4f75a9fb058ead6e7f899e693852fdc497cc51c44fedff4182aebe51c8d0ca241a751c18f5903f9452381e13f1953ae6e494e4f9599fd46a521a4effa21ad8b980ab03acf1fdafecdcfc610819c3674578044f29aa5fcb8220acdacf59ec5023d1148de791691900d399ed30ac1af417df2363b4560eeadc08650d31899420137784d84fed8d8676697f98bb966b107c3ea8c4c931b2325fcf6e7b7b1230d5e88b96aaca840b6250b6a05cbd824a0eb609ec273c512ed06e7e542f77387a8e52b9613d5dad0620be2305df06222f6059668db7cb0c45457d6956c59f175eca758412b2ce8e91a263807838e8fe0a884a9f1d41b15330986c8f9bf0611328b6e6409cc36e6ee712b023eb1919b832018bd7e6780788d18b431888612d9c8dacf4e03e4ce464442b9543df0e1d0f71e7bef088fe7e96cc4fb72540d4f82113a9acdda380ab4986002e3933f967201b3b47f7d3932e14c7a77082b4f2cc2dee68d06cf6a7684aee0ff3b115f9f50ae7ac99e2dc4f7011ce87d1de8d4d5b561b779bb7f2a268a01ce3bc5ed996c6a74a2c99cddb43cf51d7a1cca402b6d1401b294817cb0d6f62804d2440f728fd0d1ccaf9a845a27a301a7abc77465c38f9813c184021096a2bd172f8e1f344b6efb0aa66b2ccbd1ee26ef70a423b35799bf1c28e6e0614bece68a74d9dbb6a2f57e5cdd241432003a1d0ba88561baee115bf9ff9", 0x1000}, {&(0x7f0000001080)="2bff", 0x2}], 0x2, 0x6, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0xb784}}, './file0\x00'}) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000001140)={{}, 0x34}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000011c0)={0x3, &(0x7f0000001180)=[{0x2, 0xe, 0x6, 0x8}, {0x0, 0x7, 0xb, 0x3}, {0x800, 0x3c, 0x35, 0x1000}]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000001200)=""/99) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000012c0)={0x1, &(0x7f0000001280)=[{0xb, 0x7, 0x6, 0x40}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001300)=0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001340)={0x2, r1}) write$ppp(r1, &(0x7f0000001380)="64760852ed991b3ca4d65f7916ae7a5dee24ce4a0fc422eb8a1cabab68e5618adaf7cce5ac6e003733cf457001c876bb18377c5f2ccd5869ec0da50f04207128b3d8302c2376a8e6ebd7535ad0e2af5353a0460576", 0x55) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) write$ppp(r1, &(0x7f0000001400)="2a94049e9bb3aa7b625f65b023aa2a74580da284e0ddbe504ed760131a4eb868357de47040d678b99909b3aad6b83fdd2223e931cde467e0cbcc9bc3a746474da8a3", 0x42) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x11, r1, 0x3c823000) syz_open_dev$MSR(&(0x7f0000001480), 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000014c0), 0x373c, 0x121800) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001500)={0xb, r2, 'id0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001980)={r4, 0x7fffffff, 0x0, [0x0, 0xfffffffffffffffe, 0x9, 0x6, 0x8], [0x40c0, 0x8, 0x3, 0x7fffffff, 0x0, 0x9, 0x3, 0x5ddc, 0x8001, 0x8, 0x3, 0x7ff, 0x1, 0xb, 0x4, 0xc, 0x4, 0x5, 0x0, 0x2ae304fb, 0x5, 0xffffffff, 0x7, 0xfffffffffffffffb, 0x5, 0xffffffffffffff53, 0x5, 0x1, 0x9, 0x6, 0xb, 0x5, 0x6, 0x6, 0x8, 0xffffffffffffffff, 0x9, 0x7ff, 0xb, 0x7, 0x1, 0x3, 0x0, 0xa, 0x84, 0x5, 0x1, 0x2, 0x8000000000000001, 0x6, 0xa0, 0x6, 0xc3f, 0xdca3, 0xfffffffffffffff7, 0x8000000000000000, 0x497, 0x2, 0x6, 0x2f2e, 0x1, 0x7ab5, 0x72d, 0x9, 0x4, 0x3, 0x8, 0x7, 0x2, 0x5, 0x7, 0x1, 0x200, 0x71, 0x1, 0x10001, 0x2e1, 0x5, 0x65c, 0x7, 0xf, 0x100, 0x6, 0x2, 0x3, 0x9d, 0x1ff, 0x9, 0x7, 0x7fffffff, 0x9, 0x0, 0x8, 0x0, 0x8, 0x5, 0x2b8d, 0xffff, 0x1ff, 0x1, 0x7fff, 0x2a, 0x8, 0xfff, 0x0, 0xcf6, 0x0, 0xaf7e, 0x9, 0xffffffffffffffff, 0xc, 0x6, 0x901, 0x4, 0x0, 0x67, 0x8000000000000001, 0x4, 0x8, 0xbdd6, 0x4]}) r5 = openat$cgroup_subtree(r3, &(0x7f0000001dc0), 0x2, 0x0) close(r5) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000001e00)={0x0, "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"}) close(r1) r6 = openat$cgroup_procs(r2, &(0x7f0000002040)='tasks\x00', 0x2, 0x0) close(r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000021c0)={0xc, 0x0, &(0x7f00000020c0)=[@dead_binder_done], 0x84, 0x0, &(0x7f0000002100)="0e816e53be23940ce4c5a2bbc787cbc9347d350e077f7d1af3b07251fbc49588f82fba1452e7b7a265e9954a016efc97c43de81113546c49b205bcbb5e2a6f7a88b1652cbdca737cfae1d37c5d50c6fde4f72c83d2978a7de921136d67fd81a339316ede32f24d94685dceb30dd4983f584d4e5d058f6dd5e546f2094a4a70cb789af0a2"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002200), 0x400, 0x0) write$ppp(r3, &(0x7f0000002240)="2ff84aad3792057632dda8f0a62f6ef5b402b4cac6a718a818d8cec0cc9010d29c8a82340cdf3693ffb624cee21c6731960734aa820ed297f0", 0x39) 8m11.78443134s ago: executing program 4 (id=4036): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x3}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 8m11.672320669s ago: executing program 4 (id=4037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0xa, 0x0, "a0e0165b2000221b1216acc6bf584c71af9cb429f1d40007499dcb43c4bdf452"}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x50941) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x20) (async) read(r0, &(0x7f0000000040)=""/167, 0xa7) 8m11.663924527s ago: executing program 4 (id=4038): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x2fff, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x5}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x3, {0x0, 0x900, 0x7fe, 0x5}}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000000)={0x6, 0xfffffffffffffffb, 0x0, 0x3ff}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x1, 0x53d2}, {0x9, 0xb}, 0x201, 0x1}) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0xc1004111, &(0x7f0000001580)={0x0, [], [{}, {0x0, 0x100}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x3ff}, {0x2}, {}, {0x20004000, 0x1}, {0x0, 0x8080}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 8m11.473356895s ago: executing program 4 (id=4039): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x153000, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045520, &(0x7f0000002a40)) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m11.224118252s ago: executing program 4 (id=4041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 7m55.971801401s ago: executing program 35 (id=4041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 4m5.796309322s ago: executing program 7 (id=6042): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0xfffffffffffffffc) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) (async) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0xfffffffffffffffc) (async) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) (async) 4m5.543834129s ago: executing program 7 (id=6045): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) close(0x3) (async) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x10000}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) (async) close(0x5) (async) write$FUSE_DIRENT(r1, 0x0, 0x30) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000800)={0x57, 0x8, 0x6, 0xc, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) preadv2(r5, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/169, 0xa9}], 0x9, 0x8b0, 0x0, 0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (rerun: 32) 4m5.338158414s ago: executing program 7 (id=6047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0xc, 0x65, 0x7, 0x7, 0x1, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xdddd0000, 0x8, 0x8, 0xff, 0x4, 0x85, 0xe, 0x0, 0x3c, 0x7d}, {0x3000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80}, {0x10000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x6}, {0x6000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x138, 0x8000000000b, 0xf801, 0xd5dcf004, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0xc, 0x65, 0x7, 0x7, 0x1, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xdddd0000, 0x8, 0x8, 0xff, 0x4, 0x85, 0xe, 0x0, 0x3c, 0x7d}, {0x3000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80}, {0x10000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x6}, {0x6000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x138, 0x8000000000b, 0xf801, 0xd5dcf004, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async) 4m4.905066863s ago: executing program 7 (id=6050): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x9, 0x10, r4, 0xf3fae000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r8, 0x0, &(0x7f00000002c0)="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", 0x1000, 0x8}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m2.920678989s ago: executing program 7 (id=6055): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x1, 0x8}) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f000008c000/0x4000)=nil, 0x4000, 0x5a051feb1f984a19, 0x202812, r6, 0x7dfff000) 4m2.433844963s ago: executing program 7 (id=6058): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x5, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 3m47.336077995s ago: executing program 36 (id=6058): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x5, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 3.836683601s ago: executing program 6 (id=7740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40037e881}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x2080) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000001c0)=""/171) 3.604173334s ago: executing program 3 (id=7743): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x1, 0x5, 0xbfd}) syz_open_dev$loop(&(0x7f0000000000), 0xefbe, 0x101000) (async) syz_open_dev$loop(&(0x7f0000000000), 0xefbe, 0x101000) 3.581883594s ago: executing program 1 (id=7744): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x200000) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x200000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000001180)={0x320, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r3, 0x0, 0x0) (async) read$FUSE(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000119ddde0db32ba0400"/24]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) (async) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 3.480693054s ago: executing program 3 (id=7745): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x100000, 0x0, [0x1, 0x0, 0x3, 0x1a, 0x3bf, 0x10, 0x69, 0x7]}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8080) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x80045515, 0xffffffffffffffff) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r4, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x50, r8, 0x20aa8000) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000001c0)={0xffff1000, 0x102000, 0x8}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 3.220171384s ago: executing program 1 (id=7746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@x86={0x4, 0x7, 0x7, 0x0, 0x9, 0xab, 0x8, 0x7, 0x5, 0x9c, 0x40, 0x7f, 0x0, 0x5, 0x7fffffff, 0x2, 0x7f, 0x8, 0x3, '\x00', 0x0, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000b28c1f0300000000"]) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x150002, 0x0, [0x3, 0xfffffffffffffffa, 0x5, 0x200, 0x6, 0x1, 0x9, 0xe8f]}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x53f080, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r8 = dup(0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r10, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) r13 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYRES64=r14, @ANYRES16, @ANYRESHEX=r11, @ANYRESHEX=r5, @ANYRESDEC, @ANYRES8=r12, @ANYRES16=r6, @ANYBLOB="89fc8eea94e163e9e13a51ef53fe35f342b11bee2733f6305ae7b86ffccb5ffcede898f6fd89741c74084a0032721352d40e34834d2d085e7673afec93d8ea5f259510b4be321d5b82ecb51b7a4f5ecd2ba1b9a2bb6075001ae1d31cda25f249d13b524ae81faf49b1f088a63e57b2a6a2cc6a3da11f49f8510c49dd51241cf10fb19e567a7f1a6ad5ba58e617dc14a092f5c1556604bfa5", @ANYRES32=r15]) close(r15) ioctl$DRM_IOCTL_GEM_OPEN(r12, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000280)={r16, 0x80000}) read(r6, &(0x7f0000000100)=""/159, 0xfffffe5a) 3.152445454s ago: executing program 8 (id=7747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) dup(0xffffffffffffffff) (async, rerun: 64) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x4000]}}], 0xffc8) close(r4) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x541b, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 2.982772346s ago: executing program 8 (id=7748): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0xfffffffffffffff8, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 2.77624971s ago: executing program 6 (id=7749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x7ffffffffffffffc, 0x10, 0x2, 0x1, 0x4, 0x3, 0x4, 0x401, 0xffc, 0x8, 0x3, 0x9, 0x8000, 0x400000003, 0xffff], 0x2000, 0x280085}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xdddd1000, 0x4, 0x0, 0x8, 0x4, 0x8, 0x8, 0x3, 0x8, 0x2, 0xd0}, {0xdddd0000, 0x6000, 0x0, 0x3, 0x5, 0x8, 0x6, 0x4, 0x5, 0x1, 0x9a, 0x1}, {0x10000, 0x4, 0xf, 0x8a, 0x5, 0xf, 0x0, 0x5, 0x1f, 0x2, 0x9, 0x8}, {0x5000, 0x5000, 0xb, 0xa, 0x1d, 0xd, 0x2, 0x0, 0x33, 0xb4, 0x4, 0x59}, {0xdddd0000, 0xffff1000, 0x8, 0x10, 0xe, 0x0, 0x7, 0x7, 0xfb, 0x5, 0xf, 0xa}, {0x2, 0x2, 0xf, 0xb, 0x2, 0xff, 0x4, 0x99, 0x7, 0x44, 0xff, 0x4}, {0xdddd1001, 0x5000, 0x3, 0x4, 0xf4, 0x3, 0x4, 0x2, 0x2, 0x5, 0x2, 0x2}, {0xeeef0000, 0xffff1000, 0x10, 0x2, 0x3, 0xf8, 0x0, 0x0, 0xd, 0x4, 0x4, 0x6}, {0xf000, 0x8}, {0xdddd0000, 0x2}, 0x80000000, 0x0, 0xffff1000, 0x0, 0xa, 0x1000, 0x1, [0x7fffffff, 0x4800, 0xffffffff, 0x2]}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0203, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x7f) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000140)={0x0, 0x50424752, 0x0, @stepwise}) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x12) close(r8) close(r0) r9 = dup(r5) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58f04"]) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 2.775550108s ago: executing program 8 (id=7750): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x6, 0x12) 2.745341454s ago: executing program 1 (id=7751): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f00000002c0)=""/175, 0xaf) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x6, {0x5, 0xfff7, 0x9, 0x8000, 0x2, 0x7f, 0x0, 0x872, 0x4, 0x0, 0x12, 0x0, 0x100001, 0x2010000, "0e19cd276f6c8c20761a58418bdffb38a310364ef87b48499c76277e0300"}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000000, 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f00000001c0)="b2e35b34e3568c1ea1dc35a916ba7b79476a189e54aee0d5d13f84312fb99907b47897a158e2367b53732819160f46c0f143ee9e237ac9415e2a0579744607e1e66e9c390be62c18e2afb526cf0e86f82ec7168d09719aefb077d567cedacefccc8d308ee37fb58c58c27e986450bfb47f9f64ee944604f2fee60e3a08797760000c43ef59b7ff1d8b6218859793307c3b53e13dd47e17bead1904b5e04049f2d6818062b87b49c32e84034983a73733642c1581aa10225372ff9e56a884f42acee173ba5c617ff1", 0xc8}) 2.664076635s ago: executing program 8 (id=7752): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6a600, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="7b3ff5898274a62148cca768b50b721024a025355567c9788d2213a947477fdd25f9de31e54b79efeff19caeed01345d740f46dd9d12ea784082521d", 0x3c}], 0x1, 0x9, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0x40405515, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x490206, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x2ca3, 0x0, 0x3, 0x7fffffff, 0x1, 0x7cabce97, 0x2, 0x5, 0x0, 0x9, 0x800000002, 0x0, 0x2, 0x6], 0x2000, 0x98302}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) dup(r4) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc018aec0, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3e81543f4d54269001000000000000008904000000000000"]) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) mmap(&(0x7f0000d1f000/0x4000)=nil, 0x4000, 0xb, 0x4010, 0xffffffffffffffff, 0x8a904000) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) 2.484433498s ago: executing program 1 (id=7753): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r2, 0x40101286, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x80082) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169a02, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b45, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 2.299622466s ago: executing program 6 (id=7754): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1.895041014s ago: executing program 3 (id=7755): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x808000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x4) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="a41ecd626784d3f08441897fb3ee74bb832efd1d6f5264d893c50b470c99e6e937981ade5eeec57bd32145c47a97adad7e5781b082c7d144964efb324a201a2481eecbae6b60dc4e92f3281ad43e296366bc637f5305baab22c1ca10464d2d99a90fb7a8b80bc7e44bafa4cb0427a27102bcbae7f7cddc89f78e5a13484d88d56f6929d241e478ef8f96158d7a933b435de0ba2292c334a7fed70594f8bff4e9e0aec345cf7c049a425de1f6a97048b2", 0xb0}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="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", 0xff}, {&(0x7f0000001240)="5b0572f4964319b6d8fd3866a198041ceec2da3a043716c0a29fe06bd8073743b1c0384647a9edc2076d253905b1325f631c3daea2001b4f02e4c015ab9ac84b7898d7907c39718527b1be1220f2d9e8c9e42114a108c1aa88b6e0230260f2a1899afb4eddf9e2e44e69", 0x6a}, {&(0x7f00000012c0)="2d7e11b6672c0e891d6008d6", 0xc}, {&(0x7f0000001300)="03c116a75f560fa3d297572e121846159ebf1db9833d54f1a3209a38906ba7946b1e0925e2375473251ee892afaa3ebf18568299a47ab2470844ecf645a07e75d43e97213c97b42bef3a5d045c3330c00026adf750231bf87cf5ab209954049f18f7095c460f504523e4c3acb1c277e8d6611d4866e3eceb8aaa048877e861d34900ac47f80a4f5003eb717e9d667ce32480604c537b4823b41f3b73f859f202b23d9ae8fb10154332e84af6caf1f79f5b8b8206ffada91220e8306ef33739", 0xbf}], 0x6, 0x2, 0x1) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001440), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001480)={0x1, 0x8, 0x4}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000014c0)='0', 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x444000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001540)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000001580)={0x48, 0x2, r3}) ioctl$FICLONE(r1, 0x40049409, r0) r4 = syz_open_dev$ndb(&(0x7f0000001600), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000001640), 0x0, 0x100) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x1b) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) ioctl$TCSETS(r6, 0x5402, &(0x7f0000001680)={0xf, 0x5d5, 0x0, 0x2, 0x5, "cd688fe22ff3f5a25e7323dd6c44cceb70de0c"}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000001800)={0x60, 0xf, 0x5, 0xfff, 0xee, 0x2, &(0x7f0000001700)="925864503b80d1cf93ef1694b525e9be2b0e1e23c7f6b12f10a8fdef17ec7ea06a7ffca8bd5063fc86a1260fbf305c1c59882e76be9ba6d457c7b536f4949a1ab115d158c973701f4b5c964144e53f24f1404f12dc9bc8cca42299a9d2f3e4c4b1de601cc938e669f48c0b3a7fc58fe77016e0767665ce287bad51836ef13b6f71171eccc37fb7fae46124d11b95244655c56c9c50eccb9f9cb3e5d8826218040fc9aff630e66fc897c6efbbc613a76c2015abcc11eeb16365ed1aaf8c76321cad27318159123bd4c8d7eb72742d5f3ae506d01b732cd107a7d938503cb1afb847c12ff07eaee8c7e275a297005c"}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000001840)={0x10004, 0x5, 0x8000000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x6, r7}) preadv2(r4, &(0x7f0000003c00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/198, 0xc6}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/201, 0xc9}, {&(0x7f0000003b00)=""/44, 0x2c}, {&(0x7f0000003b40)=""/166, 0xa6}], 0x6, 0x9, 0x3, 0x8) r8 = syz_open_dev$video(&(0x7f0000003c80), 0x5, 0x20802) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x1) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000003cc0)) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000003e80)={{r8}, "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"}) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000004e80)={0xa, @raw_data="03c118cbcfb6d3e3e22809981bbb96b5c7812393222aa1485f5ec1271f8999401eb202cd7fb00786f43f557e7711a6ab494840bab1fbe038116fe0fee55567fef24542e14eafd2822d5221f1dad7293634ea3e3b9be8fccb60650ef38290013b0d8ac94c3111338a01892eb384e8e240c2c9af9a1ecbe7407be5687ab59e9e0aada12d4b4638d6cf5b4cf9f616b85c6f7cebd0eb5f65ebb2f060771a9437302be7c6212ee10f37db65677ccb3f5fc88ef754aa08f952123f0a77b3da21d260656faca943a760958c"}) ioctl$TCSETS(r7, 0x5402, &(0x7f0000004f80)={0x7f, 0x1ad, 0x7, 0xfffffffa, 0xe, "323d740cae7f0a3d6864c1c91da22ff2efd770"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000004fc0)=""/4096) 1.628349766s ago: executing program 3 (id=7756): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r1, &(0x7f0000002340)=""/4096, 0x1002) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0xfd}, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x2, 0x81, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x8, 0xc855}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x40, 0xc, 0x6}) dup2(r4, r3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1.627018172s ago: executing program 6 (id=7757): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1.407250756s ago: executing program 1 (id=7758): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000200)={0x0, 0x7, 0x3}, 0x8) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1.358574759s ago: executing program 8 (id=7759): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 1.200181436s ago: executing program 3 (id=7760): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000001500)=0xffffffffffffffff, 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001680)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a80)=0xfd) read(r1, &(0x7f0000000140)=""/174, 0xae) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)='\t', 0x1}], 0x1, 0x0, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x100, 0x9, 0x3, 0x2, 0x1, "35b7dcdc8fb0580c9c82b371301f6347427367"}) 1.090369939s ago: executing program 3 (id=7761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"]) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x4018aebd, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r4, 0x40101286, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = syz_open_dev$video(&(0x7f0000000100), 0x7fff, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x4, {0x4, 0xf7fff4f6, 0x770d0365, 0xb9c5a9dd}}) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6be, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xd000, 0x7, 0x0, 0x0, 0xfffffffe, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r7, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r13, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 303.307067ms ago: executing program 6 (id=7762): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000002c0)={0x1, 0xa, 0xf6, &(0x7f00000001c0)=""/246}) read$FUSE(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x10, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x10, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0xe407}) 148.446618ms ago: executing program 1 (id=7763): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4c494e4520274c6931303030303030303030303030303030300a564f4c554d450a4c494e4520274c699f45bc11e32431cd1e2efc006e652043617074757265272030303030303030303030303030303030303030300a414c5450434d20274d617374657220506c61796261636b20566f6c756d652722"], 0x8c) (async) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4c494e4520274c6931303030303030303030303030303030300a564f4c554d450a4c494e4520274c699f45bc11e32431cd1e2efc006e652043617074757265272030303030303030303030303030303030303030300a414c5450434d20274d617374657220506c61796261636b20566f6c756d652722"], 0x8c) close(r1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 131.219716ms ago: executing program 8 (id=7764): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) preadv2(r3, &(0x7f0000004180)=[{&(0x7f0000002e80)=""/97, 0x61}], 0x1, 0xda86, 0x9, 0x0) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 0s ago: executing program 6 (id=7765): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="effc6fa73cbe28a090fde68bbeb0f9d1188e9647ffa4fa96e9725d80767e9f6d0e652846a77ef6d07d5b7d65d3aab4795a7410e7f470feefc3a734cd6921a43f9cef3c95312a5b3652e2e0ff9d7c4148cee903324c7ba494664b408873afb220b2fed0bf1d094517d7d100b309b5"], 0x8) read(r0, &(0x7f00000001c0)=""/36, 0x24) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x633fb000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) kernel console output (not intermixed with test programs): ag 0x0 [ 720.881836][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.897310][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 720.905122][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 720.915299][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 720.916433][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.931062][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.939207][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.946836][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 720.956279][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.973311][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 720.995315][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.003000][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.014139][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.021928][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.036741][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.044323][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.062187][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.070209][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.077871][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.085452][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.096836][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.107816][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.116559][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.126004][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.151038][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.158524][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.171225][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.178607][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.193509][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.201575][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.208981][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.218792][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.251355][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.258805][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.276754][ T2898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.296800][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.317647][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.336929][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.354792][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.380540][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.386478][ T2946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.414342][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.433868][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.465112][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.483592][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.504628][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.520003][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.558160][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.588399][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.617636][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.635943][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.653880][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.673800][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.691112][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.713612][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.725519][ T2968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.753328][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.774915][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.803925][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.833538][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.860936][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.868551][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.893733][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.910853][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.928545][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.946944][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.960868][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 721.973349][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.000840][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.018587][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.057815][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.095522][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.126822][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.141174][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.148643][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.157121][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.164911][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.172928][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.180368][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.207558][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.234034][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.254792][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.273150][ T2988] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 722.284389][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.295730][ T2988] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 722.322486][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.336571][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.345170][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.352925][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.360433][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.368308][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.396257][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.411898][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.419467][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.473326][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.481537][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.488975][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.505212][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.520492][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.528338][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.537335][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.562876][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.580177][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.596068][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.604056][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.638037][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.658773][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.666780][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.674563][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.684116][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.691846][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.699339][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.720431][ T3020] sp0: Synchronizing with TNC [ 722.737633][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.781151][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.788628][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.803238][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.810680][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.821554][ T5889] hid-generic 0009:0800:0004.0007: unknown main item tag 0x0 [ 722.832572][ T5889] hid-generic 0009:0800:0004.0007: hidraw0: HID v0.06 Device [syz0] on syz0 [ 723.067782][ T3037] fido_id[3037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 723.084325][ T3045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.591812][ T3060] kvm: kvm [3059]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003a) = 0x2 [ 724.057203][ T3102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.939000][ T3149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.188512][ T3165] syz.3.4664: attempt to access beyond end of device [ 725.188512][ T3165] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 725.345088][ T3180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.430168][ T3183] syz.7.4665: attempt to access beyond end of device [ 725.430168][ T3183] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 725.696819][ T3207] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 726.431703][ T3244] program syz.1.4679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.523175][ T984] psmouse serio9: Failed to reset mouse on : -5 [ 726.758740][ T3269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.399775][ T3306] binder: 3305:3306 ioctl 4008662c 200000002500 returned -22 [ 727.598758][ T3314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.377941][ T3332] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x47425247, 8, 0, 0, 0) [ 729.141121][T16212] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 729.142076][ T5852] Bluetooth: hci3: command 0x1003 tx timeout [ 729.597160][ T3383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.642453][ T3383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.401261][ T984] misc userio: Buffer overflowed, userio client isn't keeping up [ 731.479404][ T984] input: PS/2 Generic Mouse as /devices/serio9/input/input158 [ 731.782821][ T984] psmouse serio9: Failed to enable mouse on [ 732.168171][ T3633] syz.7.4720 (3633) used obsolete PPPIOCDETACH ioctl [ 732.559307][ T3659] i2c i2c-0: Invalid block write size 34 [ 733.086531][ T3689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.487506][ T3780] loop6: detected capacity change from 0 to 524287999 [ 737.072034][ T4033] syz.1.4756: attempt to access beyond end of device [ 737.072034][ T4033] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 737.220867][T16212] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 737.261297][ T4054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.445978][ T4065] dlm: no locking on control device [ 737.566364][ T4065] dlm: no locking on control device [ 738.021895][ T4120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 738.519416][ T4142] binder: 4141:4142 ioctl c0306201 0 returned -14 [ 738.614634][ T4147] loop6: detected capacity change from 0 to 4 [ 738.625698][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 738.635207][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 740.118427][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.138007][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.156603][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.174699][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.214318][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.240882][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.248783][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.270831][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.281223][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.296163][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.347551][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.371010][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.387447][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.396586][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.404672][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.412927][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.421001][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.428887][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.593886][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.611044][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.639609][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.648824][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.682557][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.690645][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.699009][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.712096][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.720238][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.728415][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.736486][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.746953][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.755523][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.763577][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.771614][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.779401][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.796511][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.805138][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.814212][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.825430][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.835161][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.843283][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.854559][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.866228][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.874261][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.882366][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.904135][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.923803][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.933248][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.953465][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.976383][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 740.990960][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.005248][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.057561][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.069257][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.077406][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.086828][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.138895][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.152059][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.394986][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.403567][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.414987][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.422906][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.430674][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.439662][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.447703][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.471236][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.479032][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.509584][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.530829][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.538614][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.565174][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.585678][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.605713][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.625983][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.646448][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.666691][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.686953][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.705004][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.714161][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.724432][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.749582][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.768769][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.778425][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.786883][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.795459][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.804208][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.813458][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.822590][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.830501][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839372][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839396][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839435][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839461][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839485][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839506][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.839526][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.902428][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.910362][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.918372][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.926295][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.936507][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.945883][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.956855][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.965570][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 741.975721][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.024102][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.044582][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.053116][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.061158][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.069157][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.077107][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.085142][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.103661][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.110260][ T4293] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 742.112362][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.128790][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.136696][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.145522][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.175085][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.190282][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.207422][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.311177][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.330054][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.339739][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.364373][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.372683][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.380506][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.389135][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.409684][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.417861][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.426479][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.434986][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.443098][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.464820][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.481340][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.501092][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.531276][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.549461][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.567069][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.590946][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.601288][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.611475][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.619294][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.630327][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.638394][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646650][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646678][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646702][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646726][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646750][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646774][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646797][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646821][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646844][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646867][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646890][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646914][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646937][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646961][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.646984][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.647008][T18809] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 742.651925][T18809] hid-generic 0008:0000:FFFFFBFF.0008: hidraw0: HID v9.86 Device [syz0] on syz1 [ 742.729821][ T4325] fido_id[4325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.115308][ T4343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.199843][ T4350] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 744.411709][T30507] Bluetooth: Error in BCSP hdr checksum [ 745.476357][ T4460] input: syz1 as /devices/virtual/input/input164 [ 746.180890][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 746.180962][T16212] Bluetooth: hci3: command 0x1003 tx timeout [ 747.065709][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.072500][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.443050][ T4510] dlm: no locking on control device [ 749.975958][ T4567] input: syz1 as /devices/virtual/input/input167 [ 750.122800][ T4575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.435830][ T4595] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 750.529162][ T4509] syz.1.4843: vmalloc error: size 3219456, failed to allocated page array size 6288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 750.547523][ T4509] CPU: 0 UID: 0 PID: 4509 Comm: syz.1.4843 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 750.547549][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.547561][ T4509] Call Trace: [ 750.547568][ T4509] [ 750.547576][ T4509] dump_stack_lvl+0x189/0x250 [ 750.547605][ T4509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.547627][ T4509] ? __pfx__printk+0x10/0x10 [ 750.547647][ T4509] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 750.547674][ T4509] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 750.547701][ T4509] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 750.547729][ T4509] warn_alloc+0x214/0x310 [ 750.547763][ T4509] ? __pfx_warn_alloc+0x10/0x10 [ 750.547797][ T4509] ? __get_vm_area_node+0x28f/0x300 [ 750.547822][ T4509] ? vb2_vmalloc_alloc+0xef/0x340 [ 750.547847][ T4509] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 750.547899][ T4509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 750.547924][ T4509] ? vb2_vmalloc_alloc+0xef/0x340 [ 750.547947][ T4509] ? __get_vm_area_node+0x28f/0x300 [ 750.548001][ T4509] ? vb2_vmalloc_alloc+0xef/0x340 [ 750.548024][ T4509] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 750.548052][ T4509] ? vb2_vmalloc_alloc+0xef/0x340 [ 750.548104][ T4509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 750.548133][ T4509] ? vb2_vmalloc_alloc+0xb2/0x340 [ 750.548157][ T4509] ? __kasan_kmalloc+0x93/0xb0 [ 750.548186][ T4509] vmalloc_user_noprof+0xad/0xf0 [ 750.548212][ T4509] ? vb2_vmalloc_alloc+0xef/0x340 [ 750.548236][ T4509] vb2_vmalloc_alloc+0xef/0x340 [ 750.548258][ T4509] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 750.548281][ T4509] __vb2_queue_alloc+0x9bf/0x15a0 [ 750.548329][ T4509] vb2_core_create_bufs+0x765/0xde0 [ 750.548365][ T4509] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 750.548392][ T4509] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 750.548417][ T4509] vb2_create_bufs+0x5b9/0xae0 [ 750.548442][ T4509] ? __pfx_vb2_create_bufs+0x10/0x10 [ 750.548465][ T4509] ? v4l_sanitize_format+0x5d6/0x9f0 [ 750.548493][ T4509] v4l_create_bufs+0x190/0x2a0 [ 750.548531][ T4509] __video_do_ioctl+0xc98/0xdb0 [ 750.548564][ T4509] ? __pfx___video_do_ioctl+0x10/0x10 [ 750.548602][ T4509] video_usercopy+0x86e/0x14f0 [ 750.548636][ T4509] ? __pfx___video_do_ioctl+0x10/0x10 [ 750.548660][ T4509] ? __pfx_video_usercopy+0x10/0x10 [ 750.548695][ T4509] ? __fget_files+0x2a/0x420 [ 750.548729][ T4509] ? __fget_files+0x2a/0x420 [ 750.548758][ T4509] ? __fget_files+0x3a0/0x420 [ 750.548790][ T4509] v4l2_ioctl+0x18d/0x1e0 [ 750.548812][ T4509] ? __pfx_v4l2_ioctl+0x10/0x10 [ 750.548833][ T4509] __se_sys_ioctl+0xfc/0x170 [ 750.548871][ T4509] do_syscall_64+0xfa/0x3b0 [ 750.548890][ T4509] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.548919][ T4509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.548937][ T4509] ? clear_bhb_loop+0x60/0xb0 [ 750.548960][ T4509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.548986][ T4509] RIP: 0033:0x7f022c78e929 [ 750.549023][ T4509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.549041][ T4509] RSP: 002b:00007f022d56e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.549061][ T4509] RAX: ffffffffffffffda RBX: 00007f022c9b5fa0 RCX: 00007f022c78e929 [ 750.549076][ T4509] RDX: 0000200000000080 RSI: 00000000c100565c RDI: 0000000000000004 [ 750.549097][ T4509] RBP: 00007f022c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 750.549110][ T4509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.549121][ T4509] R13: 0000000000000000 R14: 00007f022c9b5fa0 R15: 00007ffd2e743bb8 [ 750.549152][ T4509] [ 750.549169][ T4509] Mem-Info: [ 750.910205][ T4509] active_anon:12610 inactive_anon:0 isolated_anon:0 [ 750.910205][ T4509] active_file:1570 inactive_file:45407 isolated_file:0 [ 750.910205][ T4509] unevictable:772 dirty:81 writeback:0 [ 750.910205][ T4509] slab_reclaimable:11450 slab_unreclaimable:98467 [ 750.910205][ T4509] mapped:25364 shmem:1411 pagetables:1758 [ 750.910205][ T4509] sec_pagetables:0 bounce:0 [ 750.910205][ T4509] kernel_misc_reclaimable:0 [ 750.910205][ T4509] free:1270652 free_pcp:18311 free_cma:0 [ 750.955426][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.963232][ T4509] Node 0 active_anon:50440kB inactive_anon:0kB active_file:6280kB inactive_file:181424kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:101456kB dirty:324kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12552kB pagetables:6788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 750.963308][ T4509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 750.963357][ T4509] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.963425][ T4509] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 750.963470][ T4509] Node 0 DMA32 free:1159204kB boost:2048kB min:36280kB low:44836kB high:53392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50392kB inactive_anon:0kB active_file:6280kB inactive_file:180100kB unevictable:1552kB writepending:324kB present:3129332kB managed:2557540kB mlocked:16kB bounce:0kB free_pcp:59860kB local_pcp:37028kB free_cma:0kB [ 750.963527][ T4509] lowmem_reserve[]: 0 0 1 1 1 [ 750.963569][ T4509] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 750.963624][ T4509] lowmem_reserve[]: 0 0 0 0 0 [ 750.963666][ T4509] Node 1 Normal free:3908036kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13568kB local_pcp:13568kB free_cma:0kB [ 750.963725][ T4509] lowmem_reserve[]: 0 0 0 0 0 [ 750.963767][ T4509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 750.997018][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.028653][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.057872][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.096579][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.130247][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.166260][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.215389][ T4509] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 751.225568][ T4509] Node 0 DMA32: 3*4kB (UME) 66*8kB (UE) 1*16kB (M) 327*32kB (ME) 122*64kB (UME) 45*128kB (ME) 24*256kB (M) 11*512kB (UME) 2*1024kB (ME) 7*2048kB (UME) 270*4096kB (U) = 1158668kB [ 751.243488][ T4509] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 751.255428][ T4509] Node 1 Normal: 201*4kB (UME) 62*8kB (UME) 51*16kB (UME) 224*32kB (UME) 72*64kB (UME) 9*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (UM) = 3908036kB [ 751.273985][ T4509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.283658][ T4509] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 751.293076][ T4509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.302922][ T4509] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 751.312324][ T4509] 48384 total pagecache pages [ 751.317053][ T4509] 0 pages in swap cache [ 751.322237][ T4509] Free swap = 124996kB [ 751.326440][ T4509] Total swap = 124996kB [ 751.330616][ T4509] 2097051 pages RAM [ 751.334778][ T4509] 0 pages HighMem/MovableOnly [ 751.339502][ T4509] 425688 pages reserved [ 751.344865][ T4509] 0 pages cma reserved [ 751.635903][ T4579] [U] [ 753.139232][ T4670] usb usb1: usbfs: process 4670 (syz.7.4877) did not claim interface 0 before use [ 754.810473][ T4763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.856124][ T30] audit: type=1804 audit(1750382749.358:17): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4909" name="/newroot/191/cgroup.controllers" dev="tmpfs" ino=996 res=1 errno=0 [ 755.910367][ T30] audit: type=1800 audit(1750382749.358:18): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4909" name="cgroup.controllers" dev="tmpfs" ino=996 res=0 errno=0 [ 756.092829][ T4830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.992336][ T4938] dlm: no locking on control device [ 758.948497][ T5003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.959922][ T5000] hub 6-0:1.0: USB hub found [ 758.970042][ T5000] hub 6-0:1.0: 1 port detected [ 759.086488][ T5017] vivid-003: disconnect [ 759.546141][ T5042] blktrace: Concurrent blktraces are not allowed on sg0 [ 759.662708][ T5047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.914470][ T5015] vivid-003: reconnect [ 760.715467][ T5108] random: crng reseeded on system resumption [ 760.861294][ T5120] input: syz1 as /devices/virtual/input/input169 [ 760.884013][ T5115] usb usb8: usbfs: process 5115 (syz.3.4968) did not claim interface 0 before use [ 760.956269][ T5128] ALSA: mixer_oss: invalid OSS volume '' [ 762.555281][ T5224] CUSE: DEVNAME unspecified [ 763.375665][ T5268] CUSE: info not properly terminated [ 764.044003][ T5304] random: crng reseeded on system resumption [ 764.438046][ T5321] CUSE: info not properly terminated [ 764.723458][ T5329] binder: 5328:5329 ioctl c018620c 200000001180 returned -22 [ 764.759494][ T5329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.265174][ T5357] ALSA: mixer_oss: invalid OSS volume '' [ 765.779268][ T5384] [U] ^F [ 766.175135][ T5405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.204346][ T5409] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 766.885831][ T5457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.909687][ T5520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.972856][ T5527] input: syz1 as /devices/virtual/input/input173 [ 769.746762][ T5632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.960112][ T5655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.328793][ T5670] QAT: failed to copy from user cfg_data. [ 770.549584][ T5689] blktrace: Concurrent blktraces are not allowed on sg0 [ 770.597730][ T5689] relay: one or more items not logged [item size (48) > sub-buffer size (6)] [ 770.767459][ T5707] kvm: kvm [5688]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000000 [ 771.398015][ T5748] random: crng reseeded on system resumption [ 772.004676][ T5813] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 772.012317][ T5813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 772.749840][ T5843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.778548][ T5843] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 776.030223][ T5990] program syz.6.5124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.039805][ T5991] program syz.6.5124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.598671][ T6025] loop6: detected capacity change from 0 to 524287487 [ 776.611511][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.630122][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.643928][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.662035][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.710956][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.784693][ T6040] loop6: detected capacity change from 524287487 to 0 [ 776.794570][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.807698][ T6025] ldm_validate_partition_table(): Disk read failed. [ 776.845603][ T6025] Dev loop6: unable to read RDB block 0 [ 776.860843][ T6025] loop6: unable to read partition table [ 776.869909][ T6062] ALSA: mixer_oss: invalid OSS volume '' [ 776.877382][ T6025] loop6: partition table beyond EOD, truncated [ 776.891709][ T6057] PM: Enabling pm_trace changes system date and time during resume. [ 776.891709][ T6057] PM: Correct system time has to be restored manually after resume. [ 776.908289][ T6025] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 777.508602][ T6081] dlm: non-version read from control device 136 [ 777.772078][ T6096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.400959][ T6124] input: syz1 as /devices/virtual/input/input175 [ 780.825804][ T6294] random: crng reseeded on system resumption [ 781.442691][ T6316] CUSE: DEVNAME unspecified [ 781.444084][ T6316] binder: binder_mmap: 6309 200000001000-20000000b000 bad vm_flags failed -1 [ 782.370885][ T6373] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 782.411610][ T6368] random: crng reseeded on system resumption [ 782.433277][ T6377] vim2m vim2m.0: vidioc_s_fmt queue busy [ 782.919549][ T6422] input: syz0 as /devices/virtual/input/input177 [ 783.046623][ T6442] input: syz1 as /devices/virtual/input/input178 [ 783.637543][ T6440] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 784.606136][ T6607] binder: 6602:6607 ioctl 40489426 0 returned -22 [ 785.004376][ T6629] syz.7.5230: attempt to access beyond end of device [ 785.004376][ T6629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 785.514011][ T6658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.955341][ T6792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 789.965092][ T6791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 790.923880][ T6856] CUSE: DEVNAME unspecified [ 791.271718][ T6875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.085069][ T6946] input: syz1 as /devices/virtual/input/input182 [ 793.278110][ T6957] [U]  [ 793.280945][ T6957] [U] K{ [ 793.283996][ T6957] [U] t 1ŠFfˊ`GJgo/mC [ 793.290969][ T6957] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 793.306515][ T6957] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 793.316953][ T6957] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 793.352574][ T6957] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 793.376114][ T6957] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 793.387317][ T6957] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 793.398863][ T6957] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 793.508664][ T6957] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 793.517167][ T6957] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 793.530699][ T6957] [U] 22Ʃx?0;3u [ 793.534872][ T6957] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 793.559798][ T6957] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 793.569083][ T6957] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 793.577672][ T6957] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 793.583831][ T6957] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 793.596156][ T6957] [U] ec [ 793.599281][ T6957] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 793.611661][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.698210][ T6956] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 794.239559][ T6999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.318924][ T7061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.331440][ T7062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 796.740184][ T7179] tap0: tun_chr_ioctl cmd 1074025677 [ 796.750237][ T7179] tap0: linktype set to 779 [ 798.003621][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.635848][ T7310] ALSA: mixer_oss: invalid OSS volume '' [ 800.061822][ T7326] input: syz1 as /devices/virtual/input/input184 [ 800.106763][ T7326] binder: 7325:7326 ioctl c00c620f 200000000180 returned -22 [ 800.129450][ T7331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.156980][ T7331] QAT: failed to copy from user. [ 800.274537][ T7337] [U]  [ 800.389642][ T7345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.992997][ T7382] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 801.030881][ T7382] CPU: 0 UID: 0 PID: 7382 Comm: syz.6.5383 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 801.030907][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.030919][ T7382] Call Trace: [ 801.030926][ T7382] [ 801.030934][ T7382] dump_stack_lvl+0x189/0x250 [ 801.030960][ T7382] ? kernfs_path_from_node+0x2c/0x260 [ 801.030980][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.031001][ T7382] ? __pfx__printk+0x10/0x10 [ 801.031024][ T7382] ? kernfs_path_from_node+0x2c/0x260 [ 801.031040][ T7382] ? kernfs_path_from_node+0x2c/0x260 [ 801.031058][ T7382] ? kernfs_path_from_node+0x22c/0x260 [ 801.031084][ T7382] ? kernfs_path_from_node+0x2c/0x260 [ 801.031103][ T7382] sysfs_create_dir_ns+0x259/0x280 [ 801.031133][ T7382] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 801.031162][ T7382] ? do_raw_spin_unlock+0x122/0x240 [ 801.031191][ T7382] kobject_add_internal+0x59f/0xb40 [ 801.031219][ T7382] kobject_add+0x155/0x220 [ 801.031241][ T7382] ? __pfx_kobject_add+0x10/0x10 [ 801.031260][ T7382] ? do_raw_spin_unlock+0x122/0x240 [ 801.031288][ T7382] ? get_device_parent+0x366/0x3a0 [ 801.031311][ T7382] device_add+0x408/0xb50 [ 801.031333][ T7382] tty_register_device_attr+0x3fe/0x8f0 [ 801.031378][ T7382] ? __pfx_tty_register_device_attr+0x10/0x10 [ 801.031406][ T7382] ? tty_port_init+0x136/0x1a0 [ 801.031427][ T7382] ? gsm_dlci_alloc+0x32a/0x640 [ 801.031464][ T7382] gsm_activate_mux+0x110/0x2a0 [ 801.031491][ T7382] gsmld_ioctl+0xc9f/0x1870 [ 801.031512][ T7382] ? tty_ldisc_ref_wait+0x25/0x70 [ 801.031537][ T7382] ? __pfx_gsmld_ioctl+0x10/0x10 [ 801.031569][ T7382] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 801.031609][ T7382] ? __pfx_gsmld_ioctl+0x10/0x10 [ 801.031627][ T7382] tty_ioctl+0x9c6/0xde0 [ 801.031645][ T7382] ? __pfx_tty_ioctl+0x10/0x10 [ 801.031662][ T7382] __se_sys_ioctl+0xfc/0x170 [ 801.031686][ T7382] do_syscall_64+0xfa/0x3b0 [ 801.031702][ T7382] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.031730][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.031747][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 801.031769][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.031787][ T7382] RIP: 0033:0x7f394638e929 [ 801.031802][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.031819][ T7382] RSP: 002b:00007f3947185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.031839][ T7382] RAX: ffffffffffffffda RBX: 00007f39465b6080 RCX: 00007f394638e929 [ 801.031852][ T7382] RDX: 0000200000000040 RSI: 0000000040204706 RDI: 0000000000000003 [ 801.031864][ T7382] RBP: 00007f3946410b39 R08: 0000000000000000 R09: 0000000000000000 [ 801.031875][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.031886][ T7382] R13: 0000000000000000 R14: 00007f39465b6080 R15: 00007ffcd901de88 [ 801.031915][ T7382] [ 801.032685][ T7382] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 801.035952][ T7389] binfmt_misc: register: failed to install interpreter file ./cgroup [ 802.654985][ T7585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.076341][ T7600] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 803.775144][ T7640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.736677][ T7693] input: syz1 as /devices/virtual/input/input186 [ 805.422091][ T7750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.565821][ T7761] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38415261, 8, 0, 0, 0) [ 807.029791][ T30] audit: type=1800 audit(1750382800.528:19): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5443" name="memory.events" dev="tmpfs" ino=1717 res=0 errno=0 [ 807.859750][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.195927][ T7903] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 808.509808][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.520788][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.325209][ T8013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.106655][ T8060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.218879][ T8070] input: syz1 as /devices/virtual/input/input187 [ 812.498077][ T8188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.143110][ T8311] loop2: detected capacity change from 0 to 524287999 [ 813.426037][ T8331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.812415][ T8359] random: crng reseeded on system resumption [ 814.045128][ T8385] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 814.414739][ T8412] program syz.7.5523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.748025][ C1] sd 0:0:1:0: [sda] tag#5601 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 814.758538][ C1] sd 0:0:1:0: [sda] tag#5601 CDB: Read(6) 08 00 00 00 85 f0 [ 814.771961][ T8427] input: syz0 as /devices/virtual/input/input189 [ 817.291093][ T8577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.308360][ T8576] usb usb1: usbfs: process 8576 (syz.7.5557) did not claim interface 0 before use [ 817.806007][ T8616] random: crng reseeded on system resumption [ 818.239346][ T8640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.502710][ T8651] Scaler: ================= START STATUS ================= [ 818.510118][ T8651] Scaler: ================== END STATUS ================== [ 818.978078][ T8668] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.346010][ T8680] syz.3.5578: attempt to access beyond end of device [ 819.346010][ T8680] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 821.065672][ T8773] ptm ptm7: ldisc open failed (-12), clearing slot 7 [ 821.520634][ T8794] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 821.959295][ T8813] [U]  [ 821.971275][ T8813] [U] K{ [ 821.974515][ T8813] [U] T 1ŠFFˊ`GJǘGO/MC [ 821.994637][ T8813] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 822.030657][ T8813] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 822.047372][ T8813] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 822.126425][ T8813] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 822.159405][ T8813] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 822.174269][ T8813] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 822.187700][ T8813] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< 1 [ 856.186939][T16212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.197299][T16212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.207654][T16212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.217592][T16212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.274928][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.290441][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.300561][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.325170][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.339932][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.734142][T10970] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 856.781804][T10970] CPU: 1 UID: 0 PID: 10970 Comm: syz.1.5986 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 856.781834][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.781846][T10970] Call Trace: [ 856.781854][T10970] [ 856.781862][T10970] dump_stack_lvl+0x189/0x250 [ 856.781891][T10970] ? kernfs_path_from_node+0x2c/0x260 [ 856.781912][T10970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.781953][T10970] ? __pfx__printk+0x10/0x10 [ 856.781979][T10970] ? kernfs_path_from_node+0x2c/0x260 [ 856.781997][T10970] ? kernfs_path_from_node+0x2c/0x260 [ 856.782031][T10970] ? kernfs_path_from_node+0x22c/0x260 [ 856.782048][T10970] ? kernfs_path_from_node+0x2c/0x260 [ 856.782068][T10970] sysfs_create_dir_ns+0x259/0x280 [ 856.782100][T10970] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 856.782131][T10970] ? do_raw_spin_unlock+0x122/0x240 [ 856.782159][T10970] kobject_add_internal+0x59f/0xb40 [ 856.782188][T10970] kobject_add+0x155/0x220 [ 856.782221][T10970] ? __pfx_kobject_add+0x10/0x10 [ 856.782240][T10970] ? do_raw_spin_unlock+0x122/0x240 [ 856.782270][T10970] ? get_device_parent+0x366/0x3a0 [ 856.782294][T10970] device_add+0x408/0xb50 [ 856.782318][T10970] tty_register_device_attr+0x3fe/0x8f0 [ 856.782348][T10970] ? __pfx_tty_register_device_attr+0x10/0x10 [ 856.782378][T10970] ? tty_port_init+0x136/0x1a0 [ 856.782400][T10970] ? gsm_dlci_alloc+0x32a/0x640 [ 856.782426][T10970] gsm_activate_mux+0x110/0x2a0 [ 856.782454][T10970] gsmld_ioctl+0x1261/0x1870 [ 856.782488][T10970] ? __pfx_gsmld_ioctl+0x10/0x10 [ 856.782522][T10970] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 856.782564][T10970] ? __pfx_gsmld_ioctl+0x10/0x10 [ 856.782593][T10970] tty_ioctl+0x9c6/0xde0 [ 856.782612][T10970] ? __pfx_tty_ioctl+0x10/0x10 [ 856.782630][T10970] __se_sys_ioctl+0xfc/0x170 [ 856.782655][T10970] do_syscall_64+0xfa/0x3b0 [ 856.782672][T10970] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.782701][T10970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.782718][T10970] ? clear_bhb_loop+0x60/0xb0 [ 856.782740][T10970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.782757][T10970] RIP: 0033:0x7f022c78e929 [ 856.782773][T10970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.782788][T10970] RSP: 002b:00007f022d54d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.782808][T10970] RAX: ffffffffffffffda RBX: 00007f022c9b6080 RCX: 00007f022c78e929 [ 856.782820][T10970] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008 [ 856.782831][T10970] RBP: 00007f022c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 856.782842][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.782852][T10970] R13: 0000000000000000 R14: 00007f022c9b6080 R15: 00007ffd2e743bb8 [ 856.782880][T10970] [ 856.782902][T10970] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 857.577512][T18997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.929585][T18997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.211926][T11049] ALSA: mixer_oss: invalid OSS volume '' [ 858.256170][T18997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.311486][T11055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 858.317450][T11055] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 858.421143][ T5852] Bluetooth: hci3: command tx timeout [ 858.546867][T18997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.636922][T10904] chnl_net:caif_netlink_parms(): no params data found [ 859.194771][T10904] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.222315][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.232665][T10904] bridge_slave_0: entered allmulticast mode [ 859.261114][T10904] bridge_slave_0: entered promiscuous mode [ 859.282417][T10904] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.304003][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.339091][T10904] bridge_slave_1: entered allmulticast mode [ 859.358454][T10904] bridge_slave_1: entered promiscuous mode [ 859.565804][T11337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.708617][T10904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.735080][T10904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.015476][T10904] team0: Port device team_slave_0 added [ 860.042960][T10904] team0: Port device team_slave_1 added [ 860.299276][T18997] bridge_slave_1: left allmulticast mode [ 860.321479][T18997] bridge_slave_1: left promiscuous mode [ 860.352151][T18997] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.421564][T11434] syz.1.6000: attempt to access beyond end of device [ 860.421564][T11434] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 860.596318][T18997] bridge_slave_0: left allmulticast mode [ 860.625456][T18997] bridge_slave_0: left promiscuous mode [ 860.631858][T18997] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.664845][T11438] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 860.919348][T11449] program syz.1.6002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.289017][T11465] usb usb1: check_ctrlrecip: process 11465 (syz.1.6005) requesting ep 01 but needs 81 [ 861.299244][T11465] usb usb1: usbfs: process 11465 (syz.1.6005) did not claim interface 0 before use [ 861.702398][T11478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.004197][T11489] input: syz1 as /devices/virtual/input/input205 [ 862.004234][T11489] input: failed to attach handler leds to device input205, error: -6 [ 862.284760][T11493] tty tty26: ldisc open failed (-12), clearing slot 25 [ 862.337020][T11494] tty tty26: ldisc open failed (-12), clearing slot 25 [ 862.671124][T11501] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 862.701772][T18997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.782924][T18997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.827122][T18997] bond0 (unregistering): Released all slaves [ 862.879239][T10904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.897948][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.928205][T10904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.054618][T10904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.074730][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.100664][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.166691][T10904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.207491][T11522] usb usb1: usbfs: process 11522 (syz.1.6014) did not claim interface 0 before use [ 863.416640][T11540] random: crng reseeded on system resumption [ 863.628014][T10904] hsr_slave_0: entered promiscuous mode [ 863.664303][T10904] hsr_slave_1: entered promiscuous mode [ 863.711804][T10904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.719509][T10904] Cannot create hsr debugfs directory [ 864.515436][T18997] hsr_slave_0: left promiscuous mode [ 864.696711][T18997] hsr_slave_1: left promiscuous mode [ 864.718793][T18997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.726660][T18997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.775446][T18997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.786740][T18997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.924897][T18997] veth1_macvtap: left promiscuous mode [ 864.936337][T18997] veth0_macvtap: left promiscuous mode [ 864.955120][T18997] veth1_vlan: left promiscuous mode [ 864.977582][T18997] veth0_vlan: left promiscuous mode [ 865.337823][T11660] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 867.651580][T18997] team0 (unregistering): Port device team_slave_1 removed [ 867.892257][T18997] team0 (unregistering): Port device team_slave_0 removed [ 869.948780][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.955230][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.120240][T11789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.826755][T10904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 872.889730][T10904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 872.965494][T10904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.030044][T10904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 873.294679][T10904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.362785][T10904] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.390768][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.397913][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.439989][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.447224][T11215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.140187][T10904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.935659][T10904] veth0_vlan: entered promiscuous mode [ 874.966986][T10904] veth1_vlan: entered promiscuous mode [ 875.079058][T10904] veth0_macvtap: entered promiscuous mode [ 875.119658][T10904] veth1_macvtap: entered promiscuous mode [ 875.151629][T10904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.182687][T10904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.207980][T10904] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.260686][T10904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.269466][T10904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.310884][T10904] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.820616][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.841523][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.928873][T11215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.951388][T11215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.548819][T12020] CUSE: DEVNAME unspecified [ 876.568879][T12020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.482630][T12068] vivid-000: disconnect [ 878.503836][T12064] mkiss: ax0: crc mode is auto. [ 878.516697][T12064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.980649][T12065] vivid-000: reconnect [ 881.293608][T12174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.343835][T12174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 881.697550][T12192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.645045][T12220] vivid-000: kernel_thread() failed [ 883.062604][T12236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.217117][T12285] random: crng reseeded on system resumption [ 885.485196][T12298] input: syz0 as /devices/virtual/input/input207 [ 885.514474][T12298] input: failed to attach handler leds to device input207, error: -6 [ 885.548568][T12300] input: syz0 as /devices/virtual/input/input208 [ 886.612731][T12338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.976555][T12360] loop6: detected capacity change from 0 to 63 [ 886.993009][T12363] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 887.011327][T12363] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 887.059822][T12113] Buffer I/O error on dev loop6, logical block 0, async page read [ 887.091710][T12113] Buffer I/O error on dev loop6, logical block 0, async page read [ 887.110373][T12113] Buffer I/O error on dev loop6, logical block 0, async page read [ 887.124735][T12113] Buffer I/O error on dev loop6, logical block 0, async page read [ 887.141639][T12113] Buffer I/O error on dev loop6, logical block 0, async page read [ 888.266103][T12400] kvm_intel: kvm [12399]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 888.287561][T12407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.587903][T12504] QAT: Device 253 not found [ 890.603563][T12504] syz.1.6147: attempt to access beyond end of device [ 890.603563][T12504] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 890.717257][T12515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.292545][T12538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.474003][T12549] CUSE: info not properly terminated [ 891.782142][T16212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.790659][T16212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.806786][T16212] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.835771][T16212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.846280][T16212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.869254][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.897447][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.907473][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.920344][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.929623][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.804964][T12621] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.6162' sets config #0 [ 892.855930][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.025519][T12626] program syz.6.6163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.212553][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.512497][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.793269][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.001908][T12644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 894.008403][T12644] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 894.021474][ T5852] Bluetooth: hci0: command tx timeout [ 894.081920][ T12] bridge_slave_1: left allmulticast mode [ 894.087639][ T12] bridge_slave_1: left promiscuous mode [ 894.094330][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.171924][ T12] bridge_slave_0: left allmulticast mode [ 894.177644][ T12] bridge_slave_0: left promiscuous mode [ 894.184236][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.451406][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.532186][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.592527][ T12] bond0 (unregistering): Released all slaves [ 897.310176][T12880] binder: binder_mmap: 12879 200000001000-20000000b000 bad vm_flags failed -1 [ 897.316493][T12559] chnl_net:caif_netlink_parms(): no params data found [ 897.605369][T12907] tty tty4: ldisc open failed (-12), clearing slot 3 [ 898.231337][ T12] hsr_slave_0: left promiscuous mode [ 898.260953][ T12] hsr_slave_1: left promiscuous mode [ 898.261707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.261759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.308246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.308275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.380306][ T12] veth1_macvtap: left promiscuous mode [ 898.380401][ T12] veth0_macvtap: left promiscuous mode [ 898.380625][ T12] veth1_vlan: left promiscuous mode [ 898.388728][ T12] veth0_vlan: left promiscuous mode [ 898.484627][T12947] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 898.848721][T12954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.032201][T12964] kvm_intel: kvm [12963]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 900.771669][ T12] team0 (unregistering): Port device team_slave_1 removed [ 900.991439][ T12] team0 (unregistering): Port device team_slave_0 removed [ 903.946025][T12559] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.956762][T12559] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.978376][T12559] bridge_slave_0: entered allmulticast mode [ 903.982042][T13069] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.000305][T12559] bridge_slave_0: entered promiscuous mode [ 904.004356][T13069] program syz.1.6208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.037869][T13069] program syz.1.6208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.051595][T12559] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.057707][T13069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 904.058722][T12559] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.080068][T13069] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 904.083344][T12559] bridge_slave_1: entered allmulticast mode [ 904.096470][T12559] bridge_slave_1: entered promiscuous mode [ 904.124729][T13069] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.293279][T12559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.328967][T12559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.655660][T12559] team0: Port device team_slave_0 added [ 904.675184][T12559] team0: Port device team_slave_1 added [ 905.077287][T12559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.090375][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.126192][T12559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.152071][T12559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.159610][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.185568][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.200093][T12559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.443801][T13202] input: syz1 as /devices/virtual/input/input210 [ 905.459902][T12559] hsr_slave_0: entered promiscuous mode [ 905.468857][T13202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.486123][T12559] hsr_slave_1: entered promiscuous mode [ 905.501631][T12559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.515633][T12559] Cannot create hsr debugfs directory [ 905.928724][T13270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.373673][T12559] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.510655][T12559] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 906.585178][T12559] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 906.655203][T12559] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.906154][T12559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.947259][T12559] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.055227][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.062479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.092721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.099921][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.543322][T12559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.224800][T12559] veth0_vlan: entered promiscuous mode [ 908.257144][T12559] veth1_vlan: entered promiscuous mode [ 908.338840][T12559] veth0_macvtap: entered promiscuous mode [ 908.363067][T12559] veth1_macvtap: entered promiscuous mode [ 908.452514][T12559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.517403][T12559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.633990][T12559] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.656476][T12559] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.675931][T12559] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.697542][T12559] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.206055][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.239896][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.325782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.349665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.147313][T13518] random: crng reseeded on system resumption [ 910.526717][T13530] nvme_fabrics: missing parameter 'transport=%s' [ 910.550649][T13530] nvme_fabrics: missing parameter 'nqn=%s' [ 912.395217][T13608] input: syz0 as /devices/virtual/input/input211 [ 912.665417][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 913.065707][T13640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.631894][T13744] usb usb1: check_ctrlrecip: process 13744 (syz.8.6265) requesting ep 01 but needs 81 [ 915.661039][T13744] usb usb1: usbfs: process 13744 (syz.8.6265) did not claim interface 0 before use [ 916.066932][T13771] binder: 13770:13771 ioctl c018620b 200000000100 returned -14 [ 916.504865][T13803] ubi: mtd0 is already attached to ubi31 [ 917.123271][T13830] random: crng reseeded on system resumption [ 917.657361][T13859] binder: BINDER_SET_CONTEXT_MGR already set [ 917.674190][T13859] binder: 13858:13859 ioctl 4018620d 200000000080 returned -16 [ 917.851439][T13878] input: syz1 as /devices/virtual/input/input212 [ 918.053489][ T12] Bluetooth: hci4: Frame reassembly failed (-90) [ 919.092934][T13943] syz.8.6302: attempt to access beyond end of device [ 919.092934][T13943] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 919.891023][T13981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.111155][T16212] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 920.611657][T13999] nvme_fabrics: missing parameter 'transport=%s' [ 920.611674][T13999] nvme_fabrics: missing parameter 'nqn=%s' [ 922.244845][T14065] syz.1.6322: attempt to access beyond end of device [ 922.244845][T14065] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 922.261327][T14067] syz.1.6322: attempt to access beyond end of device [ 922.261327][T14067] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 922.407053][T14081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.934634][T14105] random: crng reseeded on system resumption [ 924.443167][T14174] input: syz0 as /devices/virtual/input/input213 [ 926.616082][T14272] kvm: user requested TSC rate below hardware speed [ 927.565579][T14313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.675209][T14321] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 930.137802][T14423] binder: 14418:14423 ioctl c0306201 2000000003c0 returned -14 [ 930.184070][T14423] input: syz0 as /devices/virtual/input/input214 [ 931.390726][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.397100][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.763278][T14539] usb usb8: usbfs: process 14539 (syz.1.6396) did not claim interface 0 before use [ 933.014243][T14551] misc userio: Invalid payload size [ 933.738296][T14584] No buffer was provided with the request [ 934.019542][T14599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.042460][T14597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.839676][T14636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.023813][T14644] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 935.426107][T14676] input: syz1 as /devices/virtual/input/input215 [ 936.108157][T14701] input: syz1 as /devices/virtual/input/input216 [ 936.303280][T14711] CUSE: info not properly terminated [ 936.337032][T14715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.755587][T14744] sp0: Synchronizing with TNC [ 936.896540][T14748] syz.6.6430: attempt to access beyond end of device [ 936.896540][T14748] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 937.476458][T14782] ALSA: seq fatal error: cannot create timer (-22) [ 937.509237][T14783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.951787][T14810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.029286][T14851] CUSE: info not properly terminated [ 939.039083][T14851] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 939.306755][T14862] kvm: kvm [14854]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 941.807173][T14966] CUSE: info not properly terminated [ 941.978841][T14964] ALSA: mixer_oss: invalid OSS volume '' [ 942.024043][T14969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.925159][T15015] kvm: user requested TSC rate below hardware speed [ 943.138830][T15021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.156169][T15021] tap0: tun_chr_ioctl cmd 1074025678 [ 943.161765][T15021] tap0: group set to 0 [ 943.624784][T15040] loop6: detected capacity change from 0 to 524287999 [ 943.653422][T15040] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 943.718274][T15049] misc userio: The device must be registered before sending interrupts [ 943.869158][ T30] audit: type=1400 audit(1750382937.368:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15054 comm="syz.1.6491" [ 943.947827][T15059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.096259][T15064] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 945.220355][T16212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.229735][T16212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.242944][T16212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.253132][T16212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.261161][T16212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.288696][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.298617][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.306899][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.325652][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.337844][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 946.188356][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.352218][T15141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.360465][T15141] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 946.414762][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.806803][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.363201][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.550426][T15105] chnl_net:caif_netlink_parms(): no params data found [ 947.677147][T15334] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 948.091053][T15105] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.098297][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.116977][T15105] bridge_slave_0: entered allmulticast mode [ 948.132535][T15105] bridge_slave_0: entered promiscuous mode [ 948.151983][T15105] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.169398][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.179577][T15105] bridge_slave_1: entered allmulticast mode [ 948.223211][T15105] bridge_slave_1: entered promiscuous mode [ 948.439285][ T30] audit: type=1400 audit(1750382941.938:22): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15439 comm="syz.6.6518" [ 948.507810][T15105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.533577][T15105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.663905][ T12] bridge_slave_1: left allmulticast mode [ 948.669915][ T12] bridge_slave_1: left promiscuous mode [ 948.681828][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.789039][ T12] bridge_slave_0: left allmulticast mode [ 948.794921][ T12] bridge_slave_0: left promiscuous mode [ 948.800735][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.909687][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.930077][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.942373][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.949800][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.957794][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.965381][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.981110][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.988908][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.996702][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.004562][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.031254][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.037777][T15480] input: syz1 as /devices/virtual/input/input217 [ 949.038665][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.072083][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.079544][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.099342][T15484] random: crng reseeded on system resumption [ 949.103100][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.114362][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.122605][T15480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.150901][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.158369][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.197565][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.221066][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.228491][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.240156][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.248224][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.255955][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.263864][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.272890][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.280384][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.299260][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.309964][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.321030][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.328453][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.347846][ T982] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 949.395010][ T982] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 949.542389][T15500] fido_id[15500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 950.022048][T15546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.862367][T15679] ALSA: seq fatal error: cannot create timer (-22) [ 951.504906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.591590][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.685996][ T12] bond0 (unregistering): Released all slaves [ 951.849948][T15105] team0: Port device team_slave_0 added [ 951.990283][T15105] team0: Port device team_slave_1 added [ 952.365702][T15105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.373676][T15105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.408066][T15105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.636684][T15105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.647950][T15105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.694555][T15105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.741488][ T5852] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 953.254720][ T12] hsr_slave_0: left promiscuous mode [ 953.324140][ T12] hsr_slave_1: left promiscuous mode [ 953.348583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.374128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.446956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.468870][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.474880][T15830] binder: 15829:15830 ioctl c00c620f 200000000180 returned -22 [ 953.579584][ T12] veth1_macvtap: left promiscuous mode [ 953.598954][ T12] veth0_macvtap: left promiscuous mode [ 953.609810][ T12] veth1_vlan: left promiscuous mode [ 953.616320][ T12] veth0_vlan: left promiscuous mode [ 956.013083][ T12] team0 (unregistering): Port device team_slave_1 removed [ 956.241520][ T12] team0 (unregistering): Port device team_slave_0 removed [ 958.738505][T15105] hsr_slave_0: entered promiscuous mode [ 958.745361][T15105] hsr_slave_1: entered promiscuous mode [ 959.119922][T15864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.958094][T15996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.368802][T15105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 961.424482][T15105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 961.472536][T15105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 961.567924][T15105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 961.862100][T15105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.932433][T15105] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.968939][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.976163][T11215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.071661][T16063] Falling back ldisc for ttyprintk. [ 962.107550][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.114990][T11215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.516083][T16084] vivid-000: disconnect [ 962.529470][T16083] vivid-000: reconnect [ 962.799954][T16093] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 963.105169][T15105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.233847][T15105] veth0_vlan: entered promiscuous mode [ 963.266583][T15105] veth1_vlan: entered promiscuous mode [ 963.376718][T15105] veth0_macvtap: entered promiscuous mode [ 963.406717][T15105] veth1_macvtap: entered promiscuous mode [ 963.429403][T15105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.486732][T15105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.515132][T15105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.534353][T15105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.583010][T15105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.600409][T15105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.625757][T16124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.917927][T30507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.968696][T30507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.176978][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.205455][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.504465][T16191] input: syz0 as /devices/virtual/input/input221 [ 964.633283][T16191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.888052][T16227] loop6: detected capacity change from 0 to 524287999 [ 965.305508][T16255] sp0: Synchronizing with TNC [ 965.345583][T16263] usb usb1: usbfs: process 16263 (syz.3.6589) did not claim interface 0 before use [ 965.409427][ T30] audit: type=1800 audit(1750382958.908:23): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6591" name="pcmC2D8p" dev="devtmpfs" ino=9710 res=0 errno=0 [ 965.726110][ T12] Bluetooth: Error in BCSP hdr checksum [ 965.904092][T16284] mkiss: ax0: crc mode is auto. [ 967.301874][ T5852] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 968.070167][T16395] input: syz1 as /devices/virtual/input/input222 [ 970.872792][T16552] No buffer was provided with the request [ 974.784788][T16672] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 975.066933][T16686] syz.1.6669: attempt to access beyond end of device [ 975.066933][T16686] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 975.592216][T16716] random: crng reseeded on system resumption [ 975.746270][T16721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.743296][T16805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.331649][T16852] usb usb1: usbfs: process 16852 (syz.8.6704) did not claim interface 0 before use [ 979.323696][T16925] tun0: tun_chr_ioctl cmd 1074025675 [ 979.337866][T16925] tun0: persist enabled [ 979.744252][T16948] binder: 16947:16948 ioctl c018620b 200000000100 returned -14 [ 980.430111][T16965] ubi31: detaching mtd0 [ 980.630109][T16965] ubi31: mtd0 is detached [ 981.165727][T16999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.721892][T17036] Failed to get privilege flags for destination (handle=0x2:0x10) [ 983.753315][T17149] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 983.988435][T17161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.492564][T17191] binder: 17186:17191 ioctl 40046205 0 returned -22 [ 985.294041][T17241] binder: 17186:17241 ioctl c0306201 0 returned -14 [ 985.329027][T17204] binder: 17186:17204 ioctl c0306201 0 returned -14 [ 985.357415][T17204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.475888][T17316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.814797][T17340] vivid-000: disconnect [ 987.042865][T17339] vivid-000: reconnect [ 987.206297][T17363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.255087][T17366] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 988.194982][T17420] input: syz1 as /devices/virtual/input/input225 [ 988.468515][T17430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.399771][T17537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.730383][T17597] CUSE: info not properly terminated [ 990.533044][T17637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.973894][T17654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.441069][T17668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 991.993821][T17691] vivid-002: ================= START STATUS ================= [ 992.001602][T17691] vivid-002: Radio HW Seek Mode: Bounded [ 992.030715][T17691] vivid-002: Radio Programmable HW Seek: false [ 992.040829][T17691] vivid-002: RDS Rx I/O Mode: Block I/O [ 992.049016][T17691] vivid-002: Generate RBDS Instead of RDS: false [ 992.058180][T17691] vivid-002: RDS Reception: true [ 992.064445][T17691] vivid-002: RDS Program Type: 0 inactive [ 992.070355][T17691] vivid-002: RDS PS Name: inactive [ 992.076048][T17691] vivid-002: RDS Radio Text: inactive [ 992.084624][T17691] vivid-002: RDS Traffic Announcement: false inactive [ 992.091741][T17691] vivid-002: RDS Traffic Program: false inactive [ 992.118195][T17691] vivid-002: RDS Music: false inactive [ 992.124047][T17691] vivid-002: ================== END STATUS ================== [ 992.205760][T17721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.626612][T17746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.755032][T17753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.833312][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.839813][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.238111][T17767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.484352][T17783] input: syz0 as /devices/virtual/input/input226 [ 994.294693][T17834] QAT: failed to copy from user cfg_data. [ 994.632285][T17846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.966196][T17889] loop6: detected capacity change from 0 to 4 [ 997.149073][T17973] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 997.850007][T17994] kvm: kvm [17993]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 997.951200][T18004] rtc_cmos 00:00: Alarms can be up to one day in the future [ 998.565399][T18039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.956207][T18063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.483738][T18209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.670158][ T5889] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1001.689191][ T5889] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1001.705688][ T5889] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1001.727255][ T5889] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1001.758701][ T5889] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1001.787230][ T5889] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1001.879823][T18230] fido_id[18230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1002.237203][T18247] syz.1.6927: attempt to access beyond end of device [ 1002.237203][T18247] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1002.533341][T18273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.496624][T18386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.273025][T18420] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1006.352401][T18423] usb usb1: usbfs: process 18423 (syz.6.6960) did not claim interface 0 before use [ 1006.791505][T18445] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.6964' sets config #0 [ 1006.886538][T18450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.926902][T18450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.018074][ T43] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1008.078789][T18487] usb usb8: usbfs: process 18487 (syz.6.6970) did not claim interface 0 before use [ 1008.814257][T18513] sp0: Synchronizing with TNC [ 1010.082866][T18675] loop6: detected capacity change from 0 to 524287999 [ 1010.115933][T18678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1012.354283][T18773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.386180][T18778] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1014.528247][T18965] loop6: detected capacity change from 0 to 524287999 [ 1014.852322][T18991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.138094][T19004] serio: Serial port ttyprintk [ 1016.153342][T19037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1017.972561][T19101] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1019.595638][T19164] dlm: non-version read from control device 2 [ 1019.647597][T19168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.673449][T19168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.686903][T19168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.696463][T19168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.710176][T19168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.743200][T16212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.752779][T16212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.767384][T16212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.777059][T16212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.791770][T16212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.564700][ T2915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.869093][ T2915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.202846][ T2915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.328000][T19268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.463243][ T2915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.753686][T19165] chnl_net:caif_netlink_parms(): no params data found [ 1021.867127][T16212] Bluetooth: hci2: command tx timeout [ 1022.082327][T19387] binder: 19353:19387 ioctl c018620b 9999999999999999 returned -14 [ 1022.487289][T19165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.506699][T19165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.518537][T19165] bridge_slave_0: entered allmulticast mode [ 1022.539135][T19165] bridge_slave_0: entered promiscuous mode [ 1022.557623][ T2915] bridge_slave_1: left allmulticast mode [ 1022.579504][ T2915] bridge_slave_1: left promiscuous mode [ 1022.600276][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.682017][ T2915] bridge_slave_0: left allmulticast mode [ 1022.687713][ T2915] bridge_slave_0: left promiscuous mode [ 1022.705876][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.881515][T19403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.887477][T19403] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1023.594859][T19480] QAT: failed to copy from user cfg_data. [ 1024.050799][T19508] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 1024.050799][T19508] 4&I:#5o63ю.l%wC [ 1024.050799][T19508] ?" [ 1024.130957][T19508] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 1024.197631][T19508] CUSE: DEVNAME unspecified [ 1025.061866][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.151334][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.193495][ T2915] bond0 (unregistering): Released all slaves [ 1025.243429][T19165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.250899][T19165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.258129][T19165] bridge_slave_1: entered allmulticast mode [ 1025.266080][T19165] bridge_slave_1: entered promiscuous mode [ 1025.543663][T19165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.037869][T19165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.536966][T19605] usb usb9: usbfs: process 19605 (syz.1.7088) did not claim interface 0 before use [ 1026.966400][T19165] team0: Port device team_slave_0 added [ 1026.984231][T19165] team0: Port device team_slave_1 added [ 1027.017943][T19615] Falling back ldisc for ttyprintk. [ 1027.260325][T19659] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1027.363439][T19165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.394340][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.473666][T19165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.651326][ T2915] hsr_slave_0: left promiscuous mode [ 1027.691687][ T2915] hsr_slave_1: left promiscuous mode [ 1027.705557][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.722961][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.783008][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.801593][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.949637][ T2915] veth1_macvtap: left promiscuous mode [ 1027.955382][ T2915] veth0_macvtap: left promiscuous mode [ 1027.962228][ T2915] veth1_vlan: left promiscuous mode [ 1027.967688][ T2915] veth0_vlan: left promiscuous mode [ 1029.408201][T19705] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 1029.731379][T19709] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1029.947055][T19716] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 1029.957017][T19718] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 1030.122333][T19722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.543204][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 1030.771504][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 1033.124168][T19165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.133509][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.159871][T19165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.827101][T19165] hsr_slave_0: entered promiscuous mode [ 1033.834238][T19165] hsr_slave_1: entered promiscuous mode [ 1033.840577][T19165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.848627][T19165] Cannot create hsr debugfs directory [ 1033.940002][T19793] autofs4:pid:19793:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1033.970747][T19793] autofs4:pid:19793:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1035.053641][T19893] syz.1.7115: attempt to access beyond end of device [ 1035.053641][T19893] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1036.520072][T19165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.567893][T19165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.726963][T19165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1036.802614][T19165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1037.257705][T19165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.351888][T19165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.410238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.417568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.489185][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.496391][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.575369][T19987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.422407][T19165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.580839][T19165] veth0_vlan: entered promiscuous mode [ 1038.642792][T19165] veth1_vlan: entered promiscuous mode [ 1038.756713][T19165] veth0_macvtap: entered promiscuous mode [ 1038.875098][T19165] veth1_macvtap: entered promiscuous mode [ 1038.976285][T19165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.018892][T19165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.065751][T19165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.094957][T19165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.125441][T19165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.150709][T19165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.698240][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.735925][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.884142][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.934858][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.346457][T20114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1040.622276][T20136] binder: BC_ATTEMPT_ACQUIRE not supported [ 1040.628155][T20136] binder: 20127:20136 ioctl c0306201 200000000100 returned -22 [ 1041.268857][T20171] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1041.301225][T20171] CPU: 1 UID: 0 PID: 20171 Comm: syz.8.7138 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1041.301251][T20171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1041.301263][T20171] Call Trace: [ 1041.301270][T20171] [ 1041.301277][T20171] dump_stack_lvl+0x189/0x250 [ 1041.301302][T20171] ? kernfs_path_from_node+0x2c/0x260 [ 1041.301321][T20171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1041.301341][T20171] ? __pfx__printk+0x10/0x10 [ 1041.301362][T20171] ? kernfs_path_from_node+0x2c/0x260 [ 1041.301376][T20171] ? kernfs_path_from_node+0x2c/0x260 [ 1041.301394][T20171] ? kernfs_path_from_node+0x22c/0x260 [ 1041.301408][T20171] ? kernfs_path_from_node+0x2c/0x260 [ 1041.301427][T20171] sysfs_create_dir_ns+0x259/0x280 [ 1041.301456][T20171] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1041.301483][T20171] ? do_raw_spin_unlock+0x122/0x240 [ 1041.301512][T20171] kobject_add_internal+0x59f/0xb40 [ 1041.301540][T20171] kobject_add+0x155/0x220 [ 1041.301563][T20171] ? __pfx_kobject_add+0x10/0x10 [ 1041.301582][T20171] ? do_raw_spin_unlock+0x122/0x240 [ 1041.301609][T20171] ? get_device_parent+0x366/0x3a0 [ 1041.301631][T20171] device_add+0x408/0xb50 [ 1041.301653][T20171] tty_register_device_attr+0x3fe/0x8f0 [ 1041.301679][T20171] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1041.301714][T20171] ? tty_port_init+0x136/0x1a0 [ 1041.301734][T20171] ? gsm_dlci_alloc+0x32a/0x640 [ 1041.301758][T20171] gsm_activate_mux+0x110/0x2a0 [ 1041.301784][T20171] gsmld_ioctl+0x1261/0x1870 [ 1041.301814][T20171] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1041.301843][T20171] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1041.301883][T20171] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1041.301900][T20171] tty_ioctl+0x9c6/0xde0 [ 1041.301918][T20171] ? __pfx_tty_ioctl+0x10/0x10 [ 1041.301934][T20171] __se_sys_ioctl+0xfc/0x170 [ 1041.301958][T20171] do_syscall_64+0xfa/0x3b0 [ 1041.301974][T20171] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.302000][T20171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.302017][T20171] ? clear_bhb_loop+0x60/0xb0 [ 1041.302038][T20171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.302055][T20171] RIP: 0033:0x7f8e5ef8e929 [ 1041.302071][T20171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.302085][T20171] RSP: 002b:00007f8e5cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.302104][T20171] RAX: ffffffffffffffda RBX: 00007f8e5f1b6160 RCX: 00007f8e5ef8e929 [ 1041.302117][T20171] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 000000000000000a [ 1041.302128][T20171] RBP: 00007f8e5f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1041.302138][T20171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.302149][T20171] R13: 0000000000000000 R14: 00007f8e5f1b6160 R15: 00007fff218d1998 [ 1041.302176][T20171] [ 1041.302198][T20171] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1041.708458][T20170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.803250][T20390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.976761][T20400] serio: Serial port ttynull [ 1045.184107][T20432] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 1046.422046][T20458] random: crng reseeded on system resumption [ 1047.394291][T20499] sp0: Synchronizing with TNC [ 1047.425328][T20498] [U] [ 1047.484987][T20504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.833186][T20570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.984164][T20583] input: syz0 as /devices/virtual/input/input231 [ 1049.150108][T20592] input: syz0 as /devices/virtual/input/input232 [ 1049.514710][T20601] syz.6.7191: attempt to access beyond end of device [ 1049.514710][T20601] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1050.208425][T20626] input: syz1 as /devices/virtual/input/input233 [ 1051.345899][T20667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.377386][T20662] dlm: no local IP address has been set [ 1051.384899][T20662] dlm: cannot start dlm midcomms -107 [ 1051.555432][ T30] audit: type=1400 audit(1750383045.058:24): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=20681 comm="syz.6.7207" [ 1051.643079][T20692] CUSE: info not properly terminated [ 1051.839747][T20698] binder: 20696:20698 ioctl 40046205 0 returned -22 [ 1053.009255][T20758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.979137][T20799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.272643][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.278986][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.170110][ T5889] hid-generic 0005:0100:0007.000C: unknown main item tag 0x7 [ 1055.179526][ T5889] hid-generic 0005:0100:0007.000C: item fetching failed at offset 9/22 [ 1055.194778][ T5889] hid-generic 0005:0100:0007.000C: probe with driver hid-generic failed with error -22 [ 1056.379680][T20952] vivid-003: disconnect [ 1056.391141][T20951] vivid-003: reconnect [ 1056.409213][T20955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.040178][T20987] input: syz1 as /devices/virtual/input/input234 [ 1058.208095][T21035] binder: 21034:21035 ioctl c0306201 200000000540 returned -14 [ 1058.428993][T21039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.644695][T21113] usb usb9: usbfs: process 21113 (syz.6.7294) did not claim interface 0 before use [ 1060.945298][T21128] kvm: kvm [21127]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 1061.075192][T21119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.160386][T21139] binder_alloc: binder_alloc_mmap_handler: 21138 200000735000-200000736000 already mapped failed -16 [ 1061.922009][T21176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.389164][T21242] binder: 21241:21242 ioctl c0306201 200000000640 returned -22 [ 1064.545590][T21283] input: syz0 as /devices/virtual/input/input238 [ 1064.990288][T21294] sp0: Synchronizing with TNC [ 1065.109696][T21305] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 1070.488906][T21509] ALSA: seq fatal error: cannot create timer (-19) [ 1070.859083][T21519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.188434][T21578] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1072.195952][T21578] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1072.731581][T21597] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1072.731581][T21597] program syz.8.7385 not setting count and/or reply_len properly [ 1073.466739][T21628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.294420][T21645] loop6: detected capacity change from 0 to 63 [ 1074.305789][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.315525][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.344451][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.354191][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.373435][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.381215][T21656] binder: 21652:21656 ioctl c018620c 200000000140 returned -1 [ 1074.382103][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.397797][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.405860][T21654] binder: 21652:21654 ioctl c018620c 200000000140 returned -1 [ 1074.406338][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.421934][T10904] ldm_validate_partition_table(): Disk read failed. [ 1074.428704][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.437074][T10904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.445393][T10904] Dev loop6: unable to read RDB block 0 [ 1074.452407][T10904] loop6: unable to read partition table [ 1074.459904][T21645] ldm_validate_partition_table(): Disk read failed. [ 1074.468989][T21645] Dev loop6: unable to read RDB block 0 [ 1074.475462][T21645] loop6: unable to read partition table [ 1074.482007][T21645] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1074.640847][T21668] input: syz0 as /devices/virtual/input/input241 [ 1075.122622][T21701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.263085][T21731] tun0: tun_chr_ioctl cmd 1074025676 [ 1076.268523][T21731] tun0: owner set to 0 [ 1077.677299][T21798] input: syz0 as /devices/virtual/input/input244 [ 1077.767367][T21798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.339069][T21900] binder: 21888:21900 ioctl c00c6211 0 returned -14 [ 1080.571083][ T30] audit: type=1400 audit(1750383074.078:25): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=21909 comm="syz.6.7449" [ 1081.797805][T21960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.422430][T21987] mkiss: ax0: crc mode is auto. [ 1082.857402][T22010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.124451][ T3554] Bluetooth: hci1: Frame reassembly failed (-84) [ 1083.145021][T22022] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1083.448788][T22046] input: syz1 as /devices/virtual/input/input245 [ 1083.498999][T22046] syz.8.7473: attempt to access beyond end of device [ 1083.498999][T22046] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1083.724488][T22060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1083.771009][T22060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1083.779795][T22060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1085.140923][T16212] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1085.140940][T19168] Bluetooth: hci1: command 0x1003 tx timeout [ 1085.834082][T22136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.581883][T22161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.188237][T22180] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1087.188237][T22180] program syz.1.7498 not setting count and/or reply_len properly [ 1087.567736][T22208] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1087.830682][T22230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.959818][ T13] Bluetooth: hci1: Frame reassembly failed (-90) [ 1088.176611][T22256] input: syz1 as /devices/virtual/input/input247 [ 1088.402348][T22269] kvm_intel: kvm [22268]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 1088.946908][T22310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.020890][T22305] Bluetooth: hci1: command 0x1003 tx timeout [ 1090.027387][T16212] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1090.900825][T19168] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1092.580745][T19168] Bluetooth: hci1: command 0x1003 tx timeout [ 1092.587039][T16212] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1096.237825][T22626] input: syz0 as /devices/virtual/input/input249 [ 1097.975260][T22712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1098.658408][T22755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.031439][T22819] input: syz1 as /devices/virtual/input/input252 [ 1100.101103][T22820] random: crng reseeded on system resumption [ 1100.165366][T22820] Restarting kernel threads ... [ 1100.179264][T22820] Done restarting kernel threads. [ 1101.268430][T22872] ALSA: seq fatal error: cannot create timer (-22) [ 1101.590860][T22884] loop2: detected capacity change from 0 to 7 [ 1101.618017][T18636] Dev loop2: unable to read RDB block 7 [ 1101.649202][T18636] loop2: unable to read partition table [ 1101.657616][T18636] loop2: partition table beyond EOD, truncated [ 1101.684176][T22884] Dev loop2: unable to read RDB block 7 [ 1101.710857][T22884] loop2: unable to read partition table [ 1101.716796][T22884] loop2: partition table beyond EOD, truncated [ 1101.734138][T22884] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1103.142473][T22952] ubi31: attaching mtd0 [ 1103.149720][T22952] ubi31: scanning is finished [ 1103.196897][T22959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.314599][T22952] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1103.327695][T22952] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1103.335971][T22952] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1103.343256][T22952] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1103.351085][T22952] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1103.358073][T22952] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1103.366868][T22952] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 179509336 [ 1103.418730][T22952] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1103.461266][T22970] ubi31: background thread "ubi_bgt31d" started, PID 22970 [ 1104.977753][T23048] input: syz0 as /devices/virtual/input/input255 [ 1105.005036][T23048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.443602][T23090] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1105.506640][T23095] usb usb1: usbfs: process 23095 (syz.3.7672) did not claim interface 0 before use [ 1106.222624][T23116] binder: 23108:23116 ioctl 4018620d 0 returned -22 [ 1109.225992][T23218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.699459][T23255] sp0: Synchronizing with TNC [ 1110.834786][T23255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.104276][T23254] [U] [ 1111.346172][T23304] binder: 23300:23304 ioctl 40046205 0 returned -22 [ 1111.527493][T23311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.896028][T23327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.120254][T23338] random: crng reseeded on system resumption [ 1113.065007][T23375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.292819][T23438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.761866][T23469] kvm: kvm [23468]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 1115.706967][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.715464][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.867230][T23560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.230519][T23600] ================================================================== [ 1118.238643][T23600] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.247269][T23600] Write of size 2880 at addr ffffc9000cf3f500 by task vivid-000-vid-c/23600 [ 1118.255957][T23600] [ 1118.258309][T23600] CPU: 0 UID: 0 PID: 23600 Comm: vivid-000-vid-c Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1118.258335][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1118.258348][T23600] Call Trace: [ 1118.258355][T23600] [ 1118.258363][T23600] dump_stack_lvl+0x189/0x250 [ 1118.258390][T23600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.258425][T23600] ? __pfx__printk+0x10/0x10 [ 1118.258447][T23600] ? __pfx__printk+0x10/0x10 [ 1118.258466][T23600] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1118.258496][T23600] ? __virt_addr_valid+0xdc/0x5c0 [ 1118.258523][T23600] print_report+0xd2/0x2b0 [ 1118.258549][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.258578][T23600] kasan_report+0x118/0x150 [ 1118.258604][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.258639][T23600] kasan_check_range+0x2b0/0x2c0 [ 1118.258663][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.258693][T23600] __asan_memcpy+0x40/0x70 [ 1118.258711][T23600] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.258777][T23600] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1118.258832][T23600] ? ktime_get+0x3e/0x1f0 [ 1118.258859][T23600] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1118.258898][T23600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.258932][T23600] vivid_thread_vid_cap+0x8da/0x10d0 [ 1118.258976][T23600] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1118.259005][T23600] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1118.259033][T23600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1118.259066][T23600] ? __kthread_parkme+0x7b/0x200 [ 1118.259088][T23600] ? __kthread_parkme+0x1a1/0x200 [ 1118.259114][T23600] kthread+0x70e/0x8a0 [ 1118.259155][T23600] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1118.259202][T23600] ? __pfx_kthread+0x10/0x10 [ 1118.259229][T23600] ? _raw_spin_unlock_irq+0x23/0x50 [ 1118.259257][T23600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.259287][T23600] ? __pfx_kthread+0x10/0x10 [ 1118.259313][T23600] ret_from_fork+0x3f9/0x770 [ 1118.259335][T23600] ? __pfx_ret_from_fork+0x10/0x10 [ 1118.259358][T23600] ? __switch_to_asm+0x39/0x70 [ 1118.259383][T23600] ? __switch_to_asm+0x33/0x70 [ 1118.259416][T23600] ? __pfx_kthread+0x10/0x10 [ 1118.259444][T23600] ret_from_fork_asm+0x1a/0x30 [ 1118.259478][T23600] [ 1118.259485][T23600] [ 1118.475914][T23600] The buggy address belongs to the virtual mapping at [ 1118.475914][T23600] [ffffc9000cf38000, ffffc9000cf41000) created by: [ 1118.475914][T23600] vb2_vmalloc_alloc+0xef/0x340 [ 1118.493805][T23600] [ 1118.496141][T23600] The buggy address belongs to the physical page: [ 1118.502558][T23600] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xbf7 pfn:0x5b860 [ 1118.511491][T23600] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1118.518610][T23600] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1118.527197][T23600] raw: 0000000000000bf7 0000000000000000 00000001ffffffff 0000000000000000 [ 1118.535790][T23600] page dumped because: kasan: bad access detected [ 1118.542224][T23600] page_owner tracks the page as allocated [ 1118.547966][T23600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23599, tgid 23598 (syz.6.7765), ts 1118226079389, free_ts 1118133064636 [ 1118.567511][T23600] post_alloc_hook+0x240/0x2a0 [ 1118.572290][T23600] get_page_from_freelist+0x21e4/0x22c0 [ 1118.577853][T23600] __alloc_frozen_pages_noprof+0x181/0x370 [ 1118.583677][T23600] alloc_pages_mpol+0x232/0x4a0 [ 1118.588545][T23600] alloc_pages_noprof+0xa9/0x190 [ 1118.593505][T23600] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1118.599412][T23600] vmalloc_user_noprof+0xad/0xf0 [ 1118.604362][T23600] vb2_vmalloc_alloc+0xef/0x340 [ 1118.609246][T23600] __vb2_queue_alloc+0x9bf/0x15a0 [ 1118.614293][T23600] vb2_core_reqbufs+0xc31/0x1420 [ 1118.619235][T23600] __vb2_init_fileio+0x318/0xff0 [ 1118.625255][T23600] __vb2_perform_fileio+0x284/0x1600 [ 1118.630567][T23600] vb2_fop_read+0x273/0x360 [ 1118.635083][T23600] v4l2_read+0x199/0x2c0 [ 1118.639344][T23600] vfs_read+0x1fd/0x980 [ 1118.643515][T23600] ksys_read+0x145/0x250 [ 1118.647769][T23600] page last free pid 23570 tgid 23570 stack trace: [ 1118.654276][T23600] __free_frozen_pages+0xc71/0xe70 [ 1118.659403][T23600] vfree+0x25a/0x400 [ 1118.663309][T23600] kvm_put_kvm+0x1172/0x1650 [ 1118.667927][T23600] kvm_vm_release+0x43/0x50 [ 1118.672429][T23600] __fput+0x44c/0xa70 [ 1118.676419][T23600] task_work_run+0x1d1/0x260 [ 1118.681023][T23600] exit_to_user_mode_loop+0xec/0x110 [ 1118.686310][T23600] do_syscall_64+0x2bd/0x3b0 [ 1118.690907][T23600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.696809][T23600] [ 1118.699155][T23600] Memory state around the buggy address: [ 1118.704797][T23600] ffffc9000cf3ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1118.712867][T23600] ffffc9000cf3ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1118.720929][T23600] >ffffc9000cf40000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1118.728988][T23600] ^ [ 1118.733058][T23600] ffffc9000cf40080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1118.741134][T23600] ffffc9000cf40100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1118.749197][T23600] ================================================================== [ 1118.775284][T23600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1118.782530][T23600] CPU: 1 UID: 0 PID: 23600 Comm: vivid-000-vid-c Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1118.795062][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1118.805177][T23600] Call Trace: [ 1118.808481][T23600] [ 1118.811427][T23600] dump_stack_lvl+0x99/0x250 [ 1118.816046][T23600] ? __asan_memcpy+0x40/0x70 [ 1118.820663][T23600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.825891][T23600] ? __pfx__printk+0x10/0x10 [ 1118.830518][T23600] panic+0x2db/0x790 [ 1118.834441][T23600] ? __pfx_panic+0x10/0x10 [ 1118.838887][T23600] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1118.844820][T23600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1118.851195][T23600] ? print_memory_metadata+0x314/0x400 [ 1118.856694][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.862373][T23600] check_panic_on_warn+0x89/0xb0 [ 1118.867356][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.873062][T23600] end_report+0x78/0x160 [ 1118.877346][T23600] kasan_report+0x129/0x150 [ 1118.881892][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.887573][T23600] kasan_check_range+0x2b0/0x2c0 [ 1118.892540][T23600] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.898213][T23600] __asan_memcpy+0x40/0x70 [ 1118.902661][T23600] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1118.908192][T23600] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1118.913966][T23600] ? ktime_get+0x3e/0x1f0 [ 1118.918361][T23600] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1118.924570][T23600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.929812][T23600] vivid_thread_vid_cap+0x8da/0x10d0 [ 1118.935151][T23600] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1118.940914][T23600] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1118.946834][T23600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1118.953198][T23600] ? __kthread_parkme+0x7b/0x200 [ 1118.958166][T23600] ? __kthread_parkme+0x1a1/0x200 [ 1118.963311][T23600] kthread+0x70e/0x8a0 [ 1118.967446][T23600] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1118.973199][T23600] ? __pfx_kthread+0x10/0x10 [ 1118.977822][T23600] ? _raw_spin_unlock_irq+0x23/0x50 [ 1118.983072][T23600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.988305][T23600] ? __pfx_kthread+0x10/0x10 [ 1118.992920][T23600] ret_from_fork+0x3f9/0x770 [ 1118.997537][T23600] ? __pfx_ret_from_fork+0x10/0x10 [ 1119.002678][T23600] ? __switch_to_asm+0x39/0x70 [ 1119.007466][T23600] ? __switch_to_asm+0x33/0x70 [ 1119.012254][T23600] ? __pfx_kthread+0x10/0x10 [ 1119.016865][T23600] ret_from_fork_asm+0x1a/0x30 [ 1119.021675][T23600] [ 1119.024945][T23600] Kernel Offset: disabled [ 1119.029288][T23600] Rebooting in 86400 seconds..