last executing test programs: 12m43.283858262s ago: executing program 2 (id=1395): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x131002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x1010, 0xffffffffffffffff, 0x1000000000000000) 12m42.926393788s ago: executing program 2 (id=1398): r0 = syz_open_dev$loop(&(0x7f0000001100), 0x5, 0x0) lseek(r0, 0x5, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000001c0)={0x5, 0x9, 0x6, 0x80080}) close(0x3) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000940)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x40000000}, {}, {}, {}, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000080)={0xdddd1000, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003300), 0x0, 0x0) preadv2(r8, &(0x7f0000001840)=[{&(0x7f0000000080)=""/52, 0x34}], 0x1, 0x1, 0x6, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0x8a45, 0xd, [{}, {0x9, 0x1}, {0xd}, {0x2}, {}, {0x4, 0x1}, {0xb}, {0xc, 0x1}, {0x3, 0x1}, {}, {0x3}, {0xf, 0x1}, {0x7, 0x1}]}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x0, 0x2, {0xffffffff, 0x1, 0x5, 0x4}}) 12m41.359294791s ago: executing program 2 (id=1406): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x1c1a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 12m41.019796898s ago: executing program 2 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000098000040"]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0xe5, 0x0, &(0x7f0000000400)="e8fa098700d45f2a742a0624cc180f74a8f4ed1d801adf89fb52569960a773a3759a5ce95a2a006ae749ab8593946e3728ec16e491e45bcddb28b1dcb94a74a0df2bebcc2e126e098817af4069f32711a797d89ca7ffec8656484f59705714ede119e45adbd2cbe90d80d5343d27f8fac5ec7bbabaa064c1f897584301e30495fef0d991ac6b0c85ba1252b3f812fbf9ea07849a83c4785d04783a161a8e94c048f8ac2286af642c952434575a57c577e07c06fb8d6259ab83fd2d27fa19c7e960b79efddee998276f710ce513fc76d48b27588cb26d3671a4aa3dbc7477ca9727666bef00"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1c3a82, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000004740)={[{0x2, 0xfcf, 0xff, 0x5, 0x7, 0xd8, 0x77, 0x3, 0x0, 0xa, 0x6, 0x72, 0x6}, {0x6, 0x4, 0xfb, 0x7f, 0x6, 0x4c, 0x7, 0xa, 0x7, 0xe8, 0x62, 0xc8, 0x1}, {0x1, 0x7ff, 0x9, 0x7, 0x57, 0x4f, 0x82, 0x1, 0x2, 0xfb, 0xe8, 0x49, 0x1}], 0x7}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r9, &(0x7f0000000280)={0x18, 0x6}, 0x18) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3231564e}}) ioctl$SG_GET_PACK_ID(r6, 0x2287, &(0x7f0000000000)) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) 12m38.694277274s ago: executing program 2 (id=1424): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0xef000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000000c0)={0x3ff, [0xe, 0x1df, 0xffffcb5b], [{0x4, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x80000001, 0x0, 0x1, 0x0, 0x1}, {0xffff2d70, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x4}, {0x7}, {0x3, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x80, 0x10, 0x0, 0x1}, {0xca3, 0xb3, 0x0, 0x1, 0x1, 0x1}, {0x80000000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x8, 0x1, 0x1}, {0x7, 0x101, 0x0, 0x0, 0x1}, {0x4, 0x9, 0x1, 0x1}], 0x9}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x80, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x710e0209c54cd6fa, r7, 0x7dfff000) ioctl$VHOST_VDPA_SET_GROUP_ASID(r6, 0x4008af7c, &(0x7f0000000080)={0x0, 0xa}) 12m36.163969387s ago: executing program 2 (id=1437): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x48200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) 12m20.857627459s ago: executing program 32 (id=1437): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x48200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) 4m41.529043033s ago: executing program 3 (id=5568): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) preadv2(r0, &(0x7f0000000880)=[{&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000840)=""/56, 0x38}], 0xa, 0xa66, 0x2, 0xf) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000040)={0x3, 0x8}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m41.275933302s ago: executing program 3 (id=5572): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="9d", 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 4m40.931790405s ago: executing program 3 (id=5575): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}) read(r0, &(0x7f00000001c0)=""/162, 0xa2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000240)=""/236, 0xf1}], 0x1000000000000242, 0x8000, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x1, 0x60, &(0x7f0000000180)='M', 0x1, 0xc, 0x9, 0x0, 0x5, 0xc, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r8}}, 0x20) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000040)={0x0, "52dddc2e0fe0354add9a2c2a028e07598a134fc7080100fb00000017fffff300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000000)={"a1fb819c4ba7a03f71ba3fb5829728bc9f1814b6e001e3c8b14619059bf2edbd", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 4m40.477082568s ago: executing program 3 (id=5582): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x4800) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 4m39.731733418s ago: executing program 3 (id=5588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000b00), 0xa, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r6, 0x6f000) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559}}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x28, '\x00', 0x4}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r4, 0x30, 0x1, @ib={0x1b, 0x401, 0x6, {"9e2006bcb1eb37e9f757306f0b1dcfae"}, 0x5, 0x100, 0x9}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) 4m39.207372196s ago: executing program 3 (id=5595): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x401, 0x400000) syz_open_dev$loop(&(0x7f00000000c0), 0x10080004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001380)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x975e6c55332ba0e7, 0xfffffffc, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d876f97bdb22d0000b420a1a9345240f409000000177d3d458dd4992800", "90be751c551265406c7f306003d8a0f4bd001e75000800121e00", [0x0, 0x3]}}) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x64) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x5, &(0x7f00000002c0)={0x0, "ffad891cbb9d16e007f3df2747ccb3b90dd42ff8fb564f6d0bade2aa284b653339"}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES64=r3, @ANYBLOB="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", @ANYRES8=r3], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 4m19.476054455s ago: executing program 33 (id=5595): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x401, 0x400000) syz_open_dev$loop(&(0x7f00000000c0), 0x10080004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001380)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x975e6c55332ba0e7, 0xfffffffc, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d876f97bdb22d0000b420a1a9345240f409000000177d3d458dd4992800", "90be751c551265406c7f306003d8a0f4bd001e75000800121e00", [0x0, 0x3]}}) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x64) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x5, &(0x7f00000002c0)={0x0, "ffad891cbb9d16e007f3df2747ccb3b90dd42ff8fb564f6d0bade2aa284b653339"}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES64=r3, @ANYBLOB="d6fcb54d705abea00bd73c412e6650a8e1d4fcee947751c804411f58fa8f609f74f62f56c8404893db97472f78261eec9a9d3462403b1a5b4d481ec24da5d2d3b8cc13e765447bd1248008a54d8b17bb39c4d023e279d9b1a47d99db3cd9ab3ec3d76e9f1e9383e55343921aa4d433a9d09b4667410fd839668bc8b076792e18064141194a27dbe7fa3c3774c26a0b349ef195fb57839180fa1fe0dbba8c37f889f55b1d27277b4ec9e7fa45d3351cbe39d791f1be519c9922483398693b74500eaf55148ce7fa48d2075aea5b3605b4846291306e5f9398ba40437efbe4c3f0d6f8f6ce0d04659ef0504f53f13e6b3e4f0f9c94c6c2e3270c742c72b566f1aa0db7b57d2167449d0201f7d789ad542a36d25d07eeb65e155df12132f2f083d908de58513a0a900f60a2a0a4cf246390c7ebbbe6d048f19cdad6e36f8801a48a14364855cf07a3d75bab878bc5c22cc4b68861d8f3adc73778a813873dbd595cdd5ac7749fb1318e5893fae1d02578ad45d1f850a9617c8a0ad89aa9507c9845d20f3e1c165fa0fe547765fd165314fdda4f106ae10664440128d283f9c83a97c6597cf8faed8eb239b5a4db558f790cf74c1f4edb85b56a35f44469454be88757eab3e137904e44311339d3dd7bc7d54053dff0e4bf88ae2cb2cc6da24227bebebff44234de03e89d46f905de431d811d19a62f807abfc637983209ae75c6ec88a401a5939085dd98b3876e84c80bb64800eca412b46612793060e69225caaedfc59fd57c656c5f467d1b36fbe25909174284f2828ea5b9d49e3b78629f5abeb9db256a40124cf2179e7b2e1066811000030d0462b0321f753ff82b1c227002c16cd5d233b24ed30eb5ea42ee8d653b31d9485bebf07936cf78ebf57031c5eca47527c191f2f55821520712cf6e6932e206727e5730bbee477239b3a2e927cdcaed3676ae5cd788c509ce200f1083735b967c5e72d39e332fd291e0b500ce3ce466eb3de25e6b08aec70fe83d79f5b9229d51f4f00fc9b4d0fac4b04d0c93cd17826d2a18c0a682eb63268ed7ad77c5b053ba4bc5c55ffd077d21b491153ca6767937ce57fcc888ae32de063fcb3300c31a96bff73029a825cb4bf1aaf8181a669d15798c0dfd3819d31bbc1c97da4e1170f50e3510fd26a08afb171abed32f010e1191f6e72d950a23f12cb6cdddaacd566fec2d233a58664310309501118ec7b5812f6ca74e34206c1782d9704da6d41e74c48991c7abc530e8dd3271676d198a2a82657b00dad8701dbb19d4c28dd8605bf709828ecf2e05c1901474f87d692b5b4286fb071699cffeff75cfadde552cc5292475935031d8910bdd696c60ce220a1b10a362f7c62ab462062eae140ddcb6959e5fe976e148705f65d5bec7c961ba6754910e1d2c36f8da04610a6d1c28ec4e307d05a7aabee7205612443d1e2c4cb539547798b3ac5977440b2233f395c812530c66fd7df29b245127528bea76fccd4f45755bbb5f9f296c71ce596d468efa3814bc29ebe641befe4356980d05b22aed38f89a6c9a8fd95a373ff049a83d910cb6ad652e3d2d9fa27cb9664ecefc037cb301d20beeb294f9a1b8598eb35a93e3d2bac7658153aaa7a31f2d6c74f4f129f5f10d28e066e3c08c7a7eaf9d7cac110a35d47814e97f5b74927c68fdca9c0a5574a66daa34d2f69584f981762fbef2b81a7c5692fb1a21e6d16e4a2bfef9db7249a2061b1b7f9842a49d39167df60c89da316fb21f2593cb1b5289349d478793b70bc8e95b40cdce08a1ce3ce012970f7f569065e99ac32c2fd45b539e9aaa0805cab178def630d985a0d39b8bbe89d787a76b448c0e781247069aded2aa71bf1515c58cdbd99e47e175293c6becdd18fa45557f0fec35003fe5dbdb70a7bade96a88d1274186b760806ecc85178ef4c36ff188e4e21ef96deb6698077948ed43f5c970c436c6bd67c7d81e48ef333a65b269e57df5c8d11bb1ef7a42ce6a1e10bd39b803d6f4281f2309d62822901271b929824f781a293bb7c8cc02f73943ea03ff76a419f4d391e60d2d8e9f8c044addbea7ddac9d408234caf02a59b6640ec3be86e14d58b6f8ca58dbeef878ba31d0ed2eef94df1ffb0bd276499e3710c64b2a28d6e39f95559f3b2e42ca6ca1663e6118a796fb5c64c71cd2a7f660d9e2619258f655f69710a8501207dc2103e5936a34284bc5f9d3953c2deb79b62ebce4dd11fa6933c262654e35174710a5a35f65d35eb41af5d0fabd6e3a4bf7eec36267b4d5a134e3f6d5c0dc729a124c08640667432cb2bb0b32733387e8acc67e5eaab7105932c11cad14b3192cba0f5d2bc4f33319594bd6267f47db2de39a80117863d804cce5b6b2965869e64fa5d0af7badc3f3cb3981aff35508c7062f9c1882c27fe52b9e2840425c9523c2a42a4ce7d250ae31c07a06d2ecedb65acc117b9ca9c12d36b8c62b2ff0996896e200852bc3b18bc78ab9cf91a81af197c7db146ee39d2b9d96c7d605ba411aaeda7e1dcc78b0dc9ad8cd2c1f07d8136fc3fbcd090455c70053abfcde8fce8711e281b7cab21aa87453be054b0ff1a593559e15f52bec21cff033a736a40d4c4253c1c3efff1453a5f5779af898198fc05c166fddfb876b90fb7ffdde7b7f53ccefe42c78c64e81e3f7d14c9afac62d4a92a8a37b9456b62a4b05087c3bef60761540f512e387f7ea6731865af1edc048ab60a97492b0ccfdc75338ba45f6a90f633ee57979529b64c0d404604d52e5943900698092ef5aab2bc9f06c886c87cbd99f8d9167b48ede89798ed859c5ee111699e3bdbc09175ba99852151bdc10f0b07e8b611aaf99fe526ab59562cf0376a7af4a3d3faab5a3e6adb3a5b9dabb040970f496ae5bb744c95e80a218b18a5e98de7d946082b5a03cceca499da75417baa1aa64e6b0f307828866fcf8d984fb20b6303ebc0f636f6d2e16d12a086a5fc5267b44d4b0cb31cafc162d8032346d089efbfcb6d2a3e90b84a2b94b528631268a8778759272b805b29cc08661d03daf5176856f1c4528f490215ea2c6f721202602e7a3d01caffde0413657a5a58f230a1e171d4cbbca4ccc8fbb6248fe65fbfac67cd356cbb2dec210a6f481ee97c2d5a69a5f1a977f5ba694e0e2d765219c9d16c0d3bf9205a66e3d33e461195e4a283a44a1c0e74ffb368e31f1767ffd6e326ed6e0c5526331c01799f049bfbb80d1f6ef491f6c7fa505010e0f591ea957571ae8012375ef3586a118ae80d0da901203b7169377556d09a0ed374c742e78d5c64fe51ec4762a3391a73754022039263e543603f7abddadb86786617076fbb5e203f037c6fe193cbfbeec1ba0322ad9856ee1f04e61f9a101d07e9ae10edb266b64ad837d8ca627a3ba916ec24a2cf3939bde4c92c663f2911c9f0d83c2bf672c3890078098d6f9eb3150485a4ccf462b3ed3c5a00ce3a526f533a3e7f940f6fa1d2b60f2b131d7c517c4e2095a7c5bd8c1f43ef7b722cca08c16584ede7bef4e7ce8d0fe9f50a8318fa7001207da4018ab1789e9ed1abeda691344d72e9f4f4b2ddca9ab4e817181802fb1cf2b5e07b70197adc329c66a8a5d80a95922ea664b6041d4742d53b9755e60e4fd47b9b0e7bdd76bcea1a935f33985364caa7a2db36b7b956200cefbe1faa3155d8ac86c9372490c6a6e0e7c58bd835854c2aec48748f3dff24a1683432b2699e8281635f311aea5dbbdabdcd27989972fa9b31f7033ca994517b08a431a81f8f989ed48badbe76333aa4b60613161f5767cebd7687a4cc154155ecaef99f61408b488ff95d837f366fdc6fdcb0549ca982f634a9affef9f076b08f9d2a7376800f0983ce3a0ffdf59fe35e491107a4b133fd503d45e6476f6fd79cf9d26fdf685fe2ff274ad992e09f32f7206d4569e31423ddd37bc8b3429d7dd6be5221eb8c40a38bd56587a8873f81b013cf3d91e17bb2624848a585360a1ebd7017edf7f311bf89100aa8ad953dfc3f89a5835d61699e4c081bb6d7961750fe669d79a9e9496d2b462653c52e56d475d2dd3712302bbcd37438447ab6f9c3e160658f73303e59495a3c068505fa75f2791428435333f8f312df435249501344ce580fa6a71bfcbb6d686c741feb22161677a670627626fb398afeabbd95deddd17a8956415bfa32a2b9e8e347d21c3173275fb668af46a6af396000ef1802a86acb720e9fcc308f8a97cf02df1010c0ada41322876ec16f3a191346d5bf015d9af227f3c954023689fa29af74d5af00adc2c3471b945554c2b04b529c6e0fd1ab3571cb0db0098590c0b822b410d8cf45118d606b214f122ca81b96d49b5dfe02901e5d26894070ee688b9400a936e8c5327c72e4dad0b471de97b8968b487f588416847ede0d9fd7ba93547567c33da5f7d2c71cd23d61dd24f1ee7a176ded8ed4d95305e60c37438db321ad52606b87396f24055fe5be005e5a4ec8da350d4760227718cfcf066eef55003c63e3737866ab74704ebed8f22422c3942bdae035c1a9fb490efdef325e1ac5519e7da468aaaf0fa36b4742a631f6e708e93b50632590fd39ea13a5d7ca23bdbbc9d5d0cf0364e4093bfe2793c64163545b18b4f255c3a3ba26434d1df88f478179760871b1117f5a971179be2dc73ef1cac25ef94d2403d364244fb1463082c278ddec81ffd11b4d04e4b2358fb9a89864a075fab9880e6f74a51e4d3ba51135b8f9a60f0935d09124da7db5d5affb03d8452fbb3511e5d1c7d9f7ff4a707857c98368ed9deefa99a1bbe01a9f6dd6f2f33e8290c7e35f07bf5e13c764cd782dfcc781bccb66bbceb748557fe912e92bcb10d18275306236c5e8f5c8a80cf08cc519bfb3cabe83e0b61bd72225c6ec188d624911f21095bede7a05fe45ea511969a1adbe6dd3da2705e2712777d8d1bf1580dd09f81ddf4efcb4a27fadb7fce27ddbb4648b69e43131de25851b1c6c0ecf0da328dfa90c0005f66b90ff3a604e76712e2c98c62619e0217cd71ba34ddd60564882fb0853da54cab332a6110f110dfb358559048cb3190ad38812471f9ac42048b7f40d70e77e946e49049299b8a9254d190ddb0f7c31e3df3761827bd03715949937fdfe24945b6378df8424d0b3d8f3f27e7d2c7a271b9ca84a9d0ce6679a2e9d5e69fbaaa3274ca1d3c121e7cac283931e274e8057d28abce3faa1138afbca11da298d450f2737bd0b7e139262b4d603ffe7153d077959d46060a27bd4457143c94f3c61ee55f391b5793c54dcca0741e3b92d68fb405729f033656887562f8198c0d8c0343c25feda99852420800717781d233e33bbb400dafb80d6178b2315870382b300374d15db1c59d0f242860ad4541a5bbedee990b2c3cf8c2957a7efd6940f3517d053daf2e1f5eb5a04bff2320babbe219771e5298e19f84c5d5f5b16563d77c6bfe29eabcf02e86f95f04b1cd917ace6a527358b68e6f4d15d18a3ddb09535c07f01d8c7a803f447408746abb65896350d19913f1e76ee9311d240168150909e76cde2d9cc5f85c4531c2d6e7ab7008e555cdc5a7c5a86883fbc3c1c2c97c225751fc661f430590d310ad347aabab11f8ddd0c6c0682ebd8926f0b15e4b9dc16fe79a445d8b86bfe3c320f31c4e8de1dcf7092ff8c6c2f925e5bce2542c1ecc60e07bbf6686162300813fbe8538f900989bc0f11c4c45134f1027c48db53e82629835d0dcb8845f0d73eedd30ae338cfd85972dbc734e6323c53781b6912f8d5c3dd2e7a03dc392dd61614c3b1bb141788f8cbb3c4a00a6b380eb710", @ANYRES8=r3], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 3.861136572s ago: executing program 0 (id=7834): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000001dc0)={0x6, 0x0, [{0x80000007, 0xef, 0x0, 0x8, 0x5}, {0xc0000000, 0x2, 0x4, 0x3, 0x1c9}, {0x1, 0x10001, 0x8, 0x2, 0x40}, {0x80000000, 0x4, 0x20, 0x6, 0x800}, {0x6, 0x1, 0x7, 0x1, 0x5e0}, {0xa, 0x800, 0x7f, 0x6, 0x9}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0x0, 0x1, 0xfe, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$KVM_SET_CLOCK(r2, 0x400caed0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r4, 0xab02, 0xffffff00) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev2(r4, &(0x7f0000001d00)=[{&(0x7f0000000080)="78410a2f6e5b99f78d8b1e8c57a6e0342f0b6c57594b65cd7bc6bb15219c4be1eca60a713bf33e4b12a1e471aae172bf625c53ff44ea4caec1c11357d75bdeac540813c9412f", 0x46}, {&(0x7f0000000100)="a4370b48334757e59008a70114981998c43bf5cf7035d8f0ce18866ce1c6a9cf99ac48e131c5452e83f9a1fe2f0e900ab08225cc192733bca46816976e464b1c23bc127e786b295389a0ca26f0e8a74100d491cb5f6024272f4efd2eac11b524558f85e3f8c98de7dcd19c29a52b3045b3a7d5be77b492bf658dbaa0bd21d21533461ce8e0dd8e5e42534f40e4341bfcfb8950bd09f0ff0751a04b945c6816db20d0d24d02493389ef0904a6aaa4ef64cb8bbf9707b8", 0xb6}, {&(0x7f00000001c0)="d338d565746f7627bc27a0fbd98188261f3331339c5cb3dd845112879e2174bb656f353b6700c4c4a2189455467c289f82996635e5187eaf51a5f6da64f4a8a473a2cad901ed487090d7da63e34ba55a2209ff0f848060a4147c36f02955106d5f7b0d2dfc4e5e74fa57cecf7acf44816868bd7a623af2e0fa6aaff8cae927130ad3443b923e5d657bb21b59c39e70455a28bf1f877daea3c99a00c50537cdb0ca442c030eccd7a19df756582e9ab2990037201147ac2190319e4a62f884fdb38cde24f5c834d29a0e9d40064c360fce1f31c1b2bc1e0b22374239ff1c97f9", 0xdf}, {&(0x7f00000002c0)="a1fecdc008a1274f5afb5d0bfba66c76aed9515a92a176552fd15ecae714608e2dafbfbbe5cbafeae37c956d396ac8084d7bf1649263cb3f75a651a1d7951d8ab256ebeae70704c9d31f150568a1dce6b98eb3b877dfdb8b168ec189045ba647f9b21fc3b505aac18852d34439d3334f8392eb49ca02034ffcf9aa5c8daf8990649807120c7f306c22172458617dc5b8c773fa77151a891cf31ab167754ff2a45cfbc574dcd652a44b22b72c457a134ebd90ea53ff70bd520efa06", 0xbb}, {&(0x7f0000000ac0)="0f9b588ee73d22e6ae12cd481debc7d657cc58c51ca69113966c688b301f68cb1f6d19e6bb1746ced812cf0fa82608f6558b0d3385d3e455bfdbb6683908db78e5b7a008fdd941c734b6baa42870219a8702ab8aa60ec1dc32f2afba20843a49a39a23bf8e75af22275a4ef95f46a6b8b08a3458e0056f8da16e61970e55d2c72469c5", 0x83}, {&(0x7f0000000b80)="97d880b4205335", 0x7}, {&(0x7f0000000bc0)="e45e6fe772e8e57058c1d2c31e1c5709ed704322a48fd947b2288d5fc14b790e5f4cf19ea1838e40c541c9404087230c0c08b5f8026270862aa34ad67b3382ade3bbc300f4bbf090d143f4c1389914c6edfbf32f73bf3cb7321d713a96d906f8e859d9421444232d7c487eb01660d0b91cde28bf7d32c4904897b6f145ab72c98c0fabdd0e48e13762e502f69d2d59275165f954137b1b8b6a643ce25a75a0d134dde87c20adf74038880a99f9cf3a12ca99c7a071e3386008db347a06aa4e36a1a4d62885ac7d0a61357bc0dcf620ebdeb406b9577eaf5ed4894bdd55d21e3b81c3ac6b6cb006e0c072bd477d5cf93396d57ffd8cb3a07d2ae174aece1e24f2f8e61b828c592acf1bb9b43dea2e6dc0e6865c3ca87b890cc0b3bd30ce1ac2c47f9b49947c37314f9de1f9ec2aa95fda9d8cfcb159874f3e2ba8be5fae79f2ec155984a65c95c63cc69f4a9c7852c89f379612afebdcc2f459a4620ac6a03af0ada789a6e8eb9f184349ac33c49b34ac40e10bf905c94aceef049b52f44f340309a07013094734c7e04591604ed25bfc59f1a7b2ef1bc812a484fc274ffeab1edf19d8f4cc2895a4a75e7eed49d0c4937590d9aef0fd8349e484aac1c63f4a4d61872ab1f37153f6b316d53b92ae2e5ed2f933be66a8922c1d2f7e98aca4cc78b837792360e89145cb3c147cfdbd9d3ea99aa96882b27edef39082656e86534fbea40905d071086059e14aaeb7a99709a999ee195cce205f85d65eddad0cc9f4c29111024b6958bbff6f6eddb40864665fa35bd80a2c5a58aaecdb5832d0611064d2e5ddb7c815f0ac8d3fcdb481401755dac8d2aef36e46f1e7f27f4c5c7eadfea77e8497d14c1bb62c6781271da92761f0c92e35c1335140d1a96e7e3da993f9327fad7c940a0f10b945dbda185c400cbe98737679ce5f6a2b1c0c93d0803fb71df29c6ddfab9955984534c063c5981ad3484bb309e0c8c2199915c74fc9adec4fd2edf2142bff926335c12296f8662b8946a8e3b7029c8e69081be70477ba6d7dd6410647dff5111f261bc605cb1eddb18b8d9e7b74fcaa071f6ff19e8ed11b9116ca1579f3b767fd297b35a8991de986447ae808d2103b8e5b515906e038ae80c274c6dad9829501963ad3cef8a8a8c94b6881fac72c444a4dc3afd344e52a0b0ec888100d1acb673359b52c03f8e6e4cf7291574640d2213c0eecd97339fd715d552bd8c38900a624ddaeb91c64345ae4260020de0cce745c359beae229c3ab8445666711d1333abdd317de174620f5e3d935ccd336b8ce18f354cd04719a9065f4093db695feb5c7945e5c70b7d5c9cddd7830d4053db8a30cd5fb54723fa47a3137522123126f4d5eb0fbfc098ef748d8b73ce31b042db62a10569a02079c9d4fef187ee2e21fca56ee4200d0ac1530c55dcf5a84790e47751a7124ab37b6a558b534201b5b29f56840b6310461f43f07c898c3d83c12bfefbb80f6faa5133738ec3cff852711c9edff8764b231e13e281d5906f6b1139a43de9f47b0df22ecab511240926859c74a804c11ed7fd473907b07ef00aa4dcda1df087bc29defe99fe499b79f211cd0f3b883e21dd3ec8bba234b37485f5e83d2ea77aedff6455d2f9058dcdd7b3c51113eff5141cd1f838f71c0bfbbbd0e92efa479ef7c1806d39ba24abc80c4f89ccc7495e45a4c636213e87783a87df13413f1dd0a6e5f534e64aec54c8b32a539cb2a7f23b56308d2b0f36aa362f4bbddcc9c5a8ff53b0ea5c56dc24cf3d4490891426c97a7c09f1014c9be77e90dfe2b5e276e81b7ee9eb29ea50968b01dbf4308d8df0a3f7e8002596196fde335f53ebcb809631d5334e2321cf398553c72d3e186b3e62283ecbb1bf0eed98def302db0f27642d2300823456ffd4e1816d72f6048aabd25616aaf8b27c50feb9a87c9b9e80f1e2c7e969f890a6ebf56fdd4c8034a78266548e26ad1a8b6aaf32d7c6d29fa98bc909d95605194fdcdcc4af69956a1e21f56a841aede2a57852028c9ff01e482e47b4ddbe70c9f7eda8a23f067471ca772d560e87864f3e88a8ea1000689a5e7cfe2cba9b88eebab00844ea2cfe3cd0e413ec9437a4e858cd11aff8fdad4b50ca9e660e84e3817043bd79cb18ef5aab4a0b0ea1fe8da9140f905c2ec3c5d5e47de3238259419518054769ed4938abb98265781bb7b2acf790ea668c0cb18032c5249e3f9b139ac83b90f528253efb8b413f2159c0d996eff0f9c82f29ce43820b6eebe213cab336ed1bbacba861bf3f247eee761ce8014ca81c8265d4c49d26d55f5db07c265c048e16a148ff0096f1a148020be9e6722cd47fb69bdc483834173cb78801b570ea73cd205f76a6cb05e4bee72dbbd7dab9af37ee0e43978f6e892fe7995edfff16beaee7aef13804df570644fc06b62148e7f85d8f0924750976a0fc449875dfeab88abab71f4be0d8805a2ce5664dcd923f460e3d174b95a7bee378427730aa7626a4d5651a019d4064d7606e477c0f8d7c0f9e52ea1336e9930b9b6beba8a244dc0bdfd5eb9b1f342a12a959b387d90d529d167d3e88467c50786aacf202af01b05414ba18bf59827e2b551b5a9a4a350e5adcb304eef4947a94e01ba617b5cbbf2e3e68b84df51cfc8768dcf350569aa58deb9d818ae8a75aa358d990073897d7a9e8769652529dcacd475dd6024fbbd2b165f524ca913d33768b502f0ba5bba22836d3d9f4a376a63f7b7339b0b45e7342c0232a75ce3f3317cf695212d7af9b20a560f458222b30df469282015c40056857543a9fc906b21effbef4a75d1d3e57d5aa0f3ddc076fdb3f22f1b3014a99eb528189bee57c919a2372fa8f8daa6ef3e577c28159b7ad2977932069e622c8292175652859bb8829a51edf1163fd362e3e94d76bddbe16e90a12f22ae73afdc62bd04e75f99c2246dd44e2924299159777337b6b693a903d0c9251ea6b6c23604d025754101410e429da0eec1a9df27825e5a25f9a3eaf8946ee995f2bb55c0b4d023e9e2272f02009c22e88686be20f7b34d62d346b1cc2bf109c4d0ed9823e25e538269517c268fcd27160da8b4cd7e99b342045d26c64d04c29c5fb96a57a5760a22d76bed582218f3dfce7a16a2e1e6894e9b4f2ae118dec41636f7fcc2d967a25817ef77a8e8fb2c8ee15da66b6a15664d1917a5ec42ad99566c4318ce4f3a1e24771e334175330d8629d7507ba3ac92854c4da2b78b7ef5ad5393cd25cf2390f41efe2e794b2c6632f7094d1afd822bd7a07a0b1dd25bbd5005a5be593ad37c95c65545f033da298d2159fb5b87d4b2c3f4e79e65f3c4382b02471df23c49e7f1113181e087f83d2fc50821108c56703e49484eb814271560e79869d80cb1008d9492d4a3ae522874ba407b12be1389d4dc25c859979bd59f795baf8f88ca9cd1ca984e3777fb1133b4ecf2d96e83ea491a913331784577ccba5d8d6198aee7a28b4c0774c808663df81aac4e3e31fae973a73364e6f14df94979d2f55cb9fe38d810f9606eb2de389fb3719a4943cdc782f49c4c1ec55c50899f88bccabd610f60ec4f0da1459e53b227659c3c8cda685ce1812af9a9ce18cc100c7d7ed654ef683f7e1fae219f22284d46d87bde681317d20b22e2744d7bf7f85fd290412b27670c9cfb18c1a53321d88a3bb3dbc75a553d52f8e363f659a1caf7b083a06fa01abe00409d226d3105a9375c49b971fd8c8b04185abafedb91f28bb427e3a8f5da02cae90902182b9fbbfb4cc25a27be6875016545de75d6e7691cddd0c3fae86e9f49362de6c4fac90bb52702c0815265739c1e009c19b8ea7622f7a994f92b4a5c9f76cf183438759a8410c0f2d4e04675449be2b29d58f94edb601e611add10a3a9340108dad380079acaa8a91cd27f89dd25517876ae2538d653f99dc53719fe1a2c1946dc69f83e6c07557eff666d86b39c1264e1fd0d1c7f0b1246aeb1d44a39a442ed889d92e2b3ed630724f03e932197fd7337d61a240f1f401e3780038f7bf41e0e022ed99d63cae7f78e443e0cf8dfa8b118117639a6da75d2ff3f78897ec82bf0e92031f1459b5d1626bbeebd768cbe92cfc0c4d3ce0780daad90fbbb045045c1ecf5e5de0d883652ba4870e6209d44c7521dd15d1435203fefee13ad66353f6f6b962fe2c5a4b28286efd00c043dfa6611c741e7fdf270eab19284e75423163eccdfc00b87af4d1ad343739914b49ee4781bd1df7291c1c17f69731a19f3ed0b26589975609a73a836f702d9fc41cfd7a8542f2f962395447be66acdc0552163ab2b9a181145d7e3e6e0c84d309271911297c686a005b63d208bb274fb7ba578a2da18b96bbd3c0d2f225908af209590e7d11665d80fa7623ffc0138f39049dbabd6898bbe59630ee5ba749fdb99ba7b5f8ccd615a2e874906ee318d1a99244605ca38dbd6e266503b5b20fab47871fa09b5313d6fc371b2068ffb6cdc24ad5eb5f70e0aab4ae6e8eec56207dde7c4923ce3ed45b19eca627a21540de1385ee9fa73f55c98c811e899442b66a64a9836c80c60279349452122a1add14da15f67971670784347abe2e83e1e88ffaede151a5dd24cbfae92f610ad463e831eb6b61017d7cd2c35ebe97fe8df757f5fd263e20ec2b553315e6e91a4974c0f2a2794d1715fe55799e31697e05a07ecc1f23b1b96a2bd10bbd9d00f313d68c4ffaaa6ca88314b9761f88a1d6701f70fdd2d43d19b28f41a8a1e57ea40c5033cb028706367d8b02f80b9c334be86de5d4508c08ad10f60dfb7f62945ffb88fcbf5df96e558ca3a69afac87b07375e52a2cfd064312e7b7e7e92915010fa65a9ff765fa979c98e42bd2cb95a244221c04d998e434cf1b1d2aeb681d68f154defbfcf6c7c11680510f999558a7b92e4cec8aea77fb71ad9c360e9b102712ceaa2ed23a8257f9fea6c2f15f6cdd115e235d0c342f285be93f80c4225973e4f923d8456fca0aff3ce0d4f6004c3e809466dbc7e608d4e175ec034c74dad7939545aabfce3ef912f0875a05b3e45d61b19c890a90395b13585dd7c88494a91bc7af2b0300be1bdca1296c5ed5ac1483cb521d62e423c19c68a4dc582278f491811bebfde9549b6a10898e8e32554fec1ac1450c88d1c493976fd3c5c534aa9f8c46347ea8b3ec25e920a5b69bdd0a0e4ce8223d86f22dacdf6a401fedcd1363e77061cfa59fe15ccc537523f658375b18557a34874cccad0271f4d2340b92a37c16ac4db544bbbe5ada778ef94dd7dd902f77b57856538f77da7f97e29c47d84649e611d0ef41344d837f9c5ed66c480d8222a0cc443888376d6a34a366fbd87d3b480b6ae9273766948966ac101ed6ebd70a9dd7acadf844ed7e9e597a6e938d769e3ab1e07cc93d0db514350e1f02f93c8f43f6974a5a3a84d0a026d6860b32fe3de972274fcc8c9ca582ab6cd3c8a3c75d09181a1ced2861d8fe54e55a5ac14e71d318f53a996994d9c841a160d306007bbd60cc625d2064baecfcc3fae63829ec6ca05a422378ee08b7db5c1505a6780826b9c4498ee2fadc7f87aa0e477710e8cce3517b5ff776cb39aa0b34155af74d8f12763a0a50e7dd947ae199fc5e5406a3a5ebb4a55e31f1ad9669ca1882da5bb40e3f15ca1e3a926db73f4d906d5c24574c5dae1ecae08a2c1f9310bcbe7175e318140229ec346ca8b260e613a3ac79889a64e0d16d624036c945aa1ef48114e1f09fb843549180f183150272b4e6d4016499c22e49538613f700339ddf7a0089b1ac522965741c50255d21edad280ecac6", 0x1000}, {&(0x7f0000001bc0)="01fc75300d04e7e42f900b71189b83390b0c60c7dc1e50cceb7c0ccdd3231959cdfd58d84b9266eec09d1557dcecd7af856ce14ea31935f619b0c04afb5ade53e57b696dd15a25ab82", 0x49}, {&(0x7f0000001c40)="a6fc6e9b804fb78c4c8577dcb4d17b08e5d5a1ebb84f58b12b9c2dd99a9472cdf0a5ede303d4cfeeb29e9cb63045f437e3aee14b93de750fe9caceb3bea4608e74697e4b1431f7b7e14108565fb6590468fa65ffebc4f12d4ac14e99798f9aab4979098e880b0077f932f6f72c1f411b82f971cf7c61576300e9bcfe68", 0x7d}, {&(0x7f0000001cc0)}], 0xa, 0x4, 0x9, 0x0) write(r5, &(0x7f0000000380)="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", 0x701) openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000001dc0)={0x6, 0x0, [{0x80000007, 0xef, 0x0, 0x8, 0x5}, {0xc0000000, 0x2, 0x4, 0x3, 0x1c9}, {0x1, 0x10001, 0x8, 0x2, 0x40}, {0x80000000, 0x4, 0x20, 0x6, 0x800}, {0x6, 0x1, 0x7, 0x1, 0x5e0}, {0xa, 0x800, 0x7f, 0x6, 0x9}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0x0, 0x1, 0xfe, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) ioctl$KVM_SET_CLOCK(r2, 0x400caed0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r4, 0xab02, 0xffffff00) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pwritev2(r4, &(0x7f0000001d00)=[{&(0x7f0000000080)="78410a2f6e5b99f78d8b1e8c57a6e0342f0b6c57594b65cd7bc6bb15219c4be1eca60a713bf33e4b12a1e471aae172bf625c53ff44ea4caec1c11357d75bdeac540813c9412f", 0x46}, {&(0x7f0000000100)="a4370b48334757e59008a70114981998c43bf5cf7035d8f0ce18866ce1c6a9cf99ac48e131c5452e83f9a1fe2f0e900ab08225cc192733bca46816976e464b1c23bc127e786b295389a0ca26f0e8a74100d491cb5f6024272f4efd2eac11b524558f85e3f8c98de7dcd19c29a52b3045b3a7d5be77b492bf658dbaa0bd21d21533461ce8e0dd8e5e42534f40e4341bfcfb8950bd09f0ff0751a04b945c6816db20d0d24d02493389ef0904a6aaa4ef64cb8bbf9707b8", 0xb6}, {&(0x7f00000001c0)="d338d565746f7627bc27a0fbd98188261f3331339c5cb3dd845112879e2174bb656f353b6700c4c4a2189455467c289f82996635e5187eaf51a5f6da64f4a8a473a2cad901ed487090d7da63e34ba55a2209ff0f848060a4147c36f02955106d5f7b0d2dfc4e5e74fa57cecf7acf44816868bd7a623af2e0fa6aaff8cae927130ad3443b923e5d657bb21b59c39e70455a28bf1f877daea3c99a00c50537cdb0ca442c030eccd7a19df756582e9ab2990037201147ac2190319e4a62f884fdb38cde24f5c834d29a0e9d40064c360fce1f31c1b2bc1e0b22374239ff1c97f9", 0xdf}, {&(0x7f00000002c0)="a1fecdc008a1274f5afb5d0bfba66c76aed9515a92a176552fd15ecae714608e2dafbfbbe5cbafeae37c956d396ac8084d7bf1649263cb3f75a651a1d7951d8ab256ebeae70704c9d31f150568a1dce6b98eb3b877dfdb8b168ec189045ba647f9b21fc3b505aac18852d34439d3334f8392eb49ca02034ffcf9aa5c8daf8990649807120c7f306c22172458617dc5b8c773fa77151a891cf31ab167754ff2a45cfbc574dcd652a44b22b72c457a134ebd90ea53ff70bd520efa06", 0xbb}, {&(0x7f0000000ac0)="0f9b588ee73d22e6ae12cd481debc7d657cc58c51ca69113966c688b301f68cb1f6d19e6bb1746ced812cf0fa82608f6558b0d3385d3e455bfdbb6683908db78e5b7a008fdd941c734b6baa42870219a8702ab8aa60ec1dc32f2afba20843a49a39a23bf8e75af22275a4ef95f46a6b8b08a3458e0056f8da16e61970e55d2c72469c5", 0x83}, {&(0x7f0000000b80)="97d880b4205335", 0x7}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="01fc75300d04e7e42f900b71189b83390b0c60c7dc1e50cceb7c0ccdd3231959cdfd58d84b9266eec09d1557dcecd7af856ce14ea31935f619b0c04afb5ade53e57b696dd15a25ab82", 0x49}, {&(0x7f0000001c40)="a6fc6e9b804fb78c4c8577dcb4d17b08e5d5a1ebb84f58b12b9c2dd99a9472cdf0a5ede303d4cfeeb29e9cb63045f437e3aee14b93de750fe9caceb3bea4608e74697e4b1431f7b7e14108565fb6590468fa65ffebc4f12d4ac14e99798f9aab4979098e880b0077f932f6f72c1f411b82f971cf7c61576300e9bcfe68", 0x7d}, {&(0x7f0000001cc0)}], 0xa, 0x4, 0x9, 0x0) (async) write(r5, &(0x7f0000000380)="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", 0x701) (async) 3.427835124s ago: executing program 0 (id=7838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x7b9, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r2, 0x0, &(0x7f0000000440)="abf9be2e5134db97ee5ca7116542f49874e3d61d6dfe4c9bc3196ce51282c9d96e6ae4faae7f87d1d4bc867a5faad13de2ff2cc06928e8af0727e401a49c1c556a02cc7310af8c63852b5ee283ff65f903bc0d692069b16062a83fe923667736a81273bad30fbb92551398c369b007a5a62c7627ac70568781184c72f229d1d73b775060ec92bc786edc20e11d6c842a48223fa89d011ead2b91baa1a932840ff1f2c13ebecae3667d20e88dd0fcde08c4ab71575946c2a9ec693884a98ee9db910395d54f63daa4f0bfd10872c788c04f4cc1af4ff17b4dcfb4679610a6249b81202113f0d721f0414ac038c3a89a20c61bda8edd319f4314dba68d7a5a959c2bfcb5412dc8db991784d299fe73b0981ac01e1e60fb98563a9fda54a5f3b94473f28d964008fd99eaa27b215492f43c7d4c0604ec6a591840291d420d1ae56d4d1cc351a6fa78013d5b449b8a22f0c72992c1b941013bf2ea8c3fcd4dd6a6385be5b30d3ad5e31f9d65073e3a3040bec57e30daf813c98122f07a4dc8f974a06593c026f29fd7d01393dce22e1fd013501dbedde8a56bcb3259f81e90b00a387f0ce0e4e328fb058f7ba8f57a90e935f75e2c6cf48e271b9d95112311295ffa00fc2191bcac45f6e92b5a8529dd12f2135d0d54f3471f36fbff52daf380cd8ef7cd6d76963c2f1c6ef00f07c68e960be060450015c9db9989331c171512fbb3e1ad5b8124ace974ca156c39e386f308ae979d3494ef7b6e55c285d7f00072dc38519247a6b4a53bd3e94a61683fba2b1130a1dcbe43d3523bfeeae44ab12f059c46bfbac11c6734af5a7b9c56af2994039fdcf6e3d870eed3b886e2f64f569bc0e8c112ee1d992a4f919ea410426e1a1b3102210c8771a739094b19c00309ae28a979de597fe49e3da86ad9f79a3656a092532a4fda4edef8f895817f4b743a161d90cf8c7409f1f7903c7b1df5aa0ef48d76014e95885daecf65cc5bf1c792476a19007baf217c2f35597bd419cf05267724ce011233c70e359d4daffbb54e6963bef9e7afc08d131be1704678ab16b037760a77b4ea5bad2991b8394b9d88fea19f03caf82f58b971c0ec14f41bc05f5205b5c7e756d5dd029a16c8cc61850c436dec986e946b2e26cbf89e78c1c228fa01e138220274ef3b805b088ddb3b4b334391b3e034149cfb36ae8ce4d1f52076d49dec615f7c0f55e8f6f7eb4c5491b8e109bfbf728773a6528555a7e8705cde06220e8673d3c929e64398ca86e20da8c8432a09205b49b52b9fabb54087fa2eae6549b39725c85aeb77f4dc07847363e4fa24c7dc8b3a3c931fa36f129eccd7d6d2d0c866f37d365e8951c42d05f3a89ab1d731b526c3b50d9ffc9caf8c11774511134530436da983217448ba3499e79d166dd9e3475aeb18cb6c7f0f056b2840a69f537af2e70b3a722151b02b23901b593372ba79d6561e0b49238095e72a0e9392f114cdedcb95d11673ee1bbd80e3c1620ddd40003887c3f3dbbf74e219986033b8a58f6a8101be786c06b9909670971e683e7165fe4247ea9f99bb9b9033595b8e79be47b9134cc18898b2a27cf7f949d5d52a917c8fcb7ceaf4faec2eed75f93a2dc74af87d4286c78321c2ef26add7b4c146bd148b4e8352f59812af858686fd5b5b5a34997651dabadccdbae97082b1e8478044f642271d700a23505ac7d294b6b044c11f8a6ff90bd3868eeac5ef6af3b5851cda6eccc0de4937f6c9a63848d9ef300ecfcea3064ad8368a559f90f8e46decd7837abcab9f5ac7ec11edf1bcb8db3fef6c9716e1b92523fcf7cd1ba844718323875867cb5fa4b8999269efbcd069483b237afd11b6c8ff002a8942b46e430346466aebe5791592e14ee4d495d4ec759e8537bfa82929d8a1137f0ff345b8ab4cf147362483b7f106a1e84c09c3eb9af6b77c938728975d3b94fd528be7322f08a52741dc48f704a831bfe0a0aab22c2c925798de6f013e591a86e48da65cee15f01cbb488aac1cc4d15fcfda29b0823e6f93db5e8e40cb56403867bb11f85791e2255b23d0db53a257d5d1e12df89c683bee2d747201c304591a86451c295696467431586a68b18db0f94b633dbcdf6b5f733852a2ecf1ff39f3b058a422a45bae7b83e38d4507e5f09f52281dacc8d74f7756c42f12beabe736b4ce47f218d20f0f07298086fdfacfc896829bc2a8e1acd81c95d1524c534a699ba5e2931e55db2017ad9ec73f45113ecf73f8dbed8668bbb3a51a12fc30f8bcbdb7dd2fd78e6af2b6cfae95511948b3d38ae62dc4e5be1399e650a6480d60d45a07829a42b90201a0141d0fc26bce27ef6658d4fdc5dabc9b2ff80677e86993ccbde0abebb4f085325853521bd6b94e3e8a1d10ddefd46988c1021a438d5cf0c70d4b8eafc4855933751a2ad1ffaf9cc7e07959b16adea3adf3d672574b9ba0aaa60bbf742b34b8d8226e5f30b1795355b40c6721d4d9cd3cb57a2d57d83b87ae0da9fbd06bb9e3c52debb59b7786c0f10bb4ff563ed100563ec05bfff05572503b6f9ef1bf197795c7ce52621873bacb6a7f8cb3375d7f0913fc0714e8bfbf32893720de834f7898fbde084815fa82b2749412a1ee247f276185d45195e4a236b3e1e4b37000246652ffe1ff0e1dea7875931d1f432681d470f5d19148e7635b17fb6a504b3d26def88b093fda774f902a70cbd66534001256dc1d0fedf511db5eaa5b1b442fc5a115458ae7c6cc3e29a1aa564971ebaf2e5c812cf42e56c9418443c85dcf370a8e0b79f320e475a9f98bf9e685674119e15b0c776566fd0127ae12a96157921f80f6eadb1b890a7c41555938eb0683cc974823adb94a375ee0fb11fa7d12f09416c66296f229370b61d7be2c3940ff9541546eb60bdcafee7b03040c9139632c23261913fd56c627547d330c062cad47eb08c99256bc32f9ffe893d622faac8ed7737bae95c4e20b226f45178c3ef688cb3be8d0088209aadb5697386e5069a762b5a68cba413537ca5460a9bc03e857e89565bd8de644d2b9c067acef2e532eaa54f6f2cb61107de5f7d9a44bfc245abbb04bd75c8a4412f473bd8f21b2864badb01d1c62212bc484d33997e284ffe36abc2741bae0828af606d081e5b464a27edcf1d2463ce1295328b107ae1be2d0f1deb2c10081b9d0b07c263ca08868e22dfe6acee2338dec688083106f3b132d4f78fc62c3851cd739210145eddb8cb524ea9a3e84729876e8fe0ceeea517b795618e1a5234e19fe19ac666df1bf99320b5b7e40b5ba7976cef55cb6766fdd1120f999715f99f771cd5f3ca7373ae4856a5a67f944d00f88ae0c4fb5aafcc7e94452a1d386d04c9018cc6a16824621bcb5b6f083478f42fab69056ee764050bfe62310a57d10b485723af25168d67a7d1fb7e8c8d600a1103c384c1be44cae5c41a75b0bdb8a2042061d18b7279b75bd5599b994ed570df68789865f7d4531adad32856fb146c3627765b8ed08e2a96635699d2750d8cafa008a23efc40b35381273ad831b2d9f3d414f920153ec42c1c87ce8f29b77d04afa2147fca2d5887b380a1b7abbd845694a12db9e559e00b5439403e42890c34678e3784bb6d88bba11a6178e6ddb3cdafa2bc769bd215c0a85cf0c028999f8138a1393ebd532d87b8d17d3e3a6b2bca025e09fbe0e098f5d080ad5b4fa691538c7279828aebb077bce8d0720447b2ef083bf07ccc79b90deafa6e893fcbedcad67d6f8a45681db6210236dfb60f67dbefdba9ce727da6d74e500360efc44370803a546f97d161d6585e84a3f8508faa0f8d00e6f1590db86d0bc55f0d0bd9542b24c35a4f61e2341f83d69c216f701e84d1fc2f4b0e7ed936254bf3fb1e77e8eb6d80f74f0f03a92fb9b272b0e94aa83bb6836131e1839e08d096679e42cab85351bf3defe7746fd711354457cdf8ac5bdb8b069ae2821352c56267e9be79cc93d84aabe2354826a726ad6bec5ab1aba4c49655dff1a7b099603795dcb4f058f03ab327685a0f14de937900d834269a88fb04f34733d140579f8e6b517349f2420a8f10ef92237ded6056c983917414f5ac86c85033a702c6668cc8c93ddf117ef8faef11d4314e6f6914b0ce216bdf55acd44e963f0b4e7be8f6323b6d96d4cb45a70135704ec8d6e7e7195a7f3b60567404d7e33629c87c0ede28e0f9590a8ac4786b96bdd7a1fd87190dcc11c4dae0f1d63b7ea17dbd9f7e9c1b05259f1b779a30d383400a6d4b672fa3d50656cf0c8a929784a6a6e594ae463fd2bafa4e7bc07831a60cc747b87e9154204056eb2a34dd31b7974349c962aa7419c8ad6124f43182eafdfd5ce68b1c6d8c55f49142ff572b2a1ccbab8d40f9226968fa61b4470392a6835538e7d4486948b6a8d46de95ad8562c761bacad1292b84548c64cad7acf109fbb94d109572a28e5c9eea36fc4746adfad77a72d9e99528fd5dba33d213225e8ef582d27ef73a67cfb7ec42b6f96b127a4d99b50293d5a5da294708edb9191c3b6b41fe91730ad6727a932d53187e1ce662f49743336cffbc2c7d2c0068fb393bde6a15c70e260a3e861468b4134e54fbbb29c6c0058c9b9dc9b58407c1b939c67aebfc65e422a7cf17ef72158b3513a1758cd4ed80f681876d70960fa2a78e68d0f3429423e90625509db8cb7698ab3c534438dddae5ff9a4721fed8f1c93a9db52dd900edbe389d7223311137c8159c73372327f177bf43ed00ec3e6962a3db5fb653fc3aa0bb411361837a845742a215e198e4bd6bc036f0c261d273abfda9c5d3cd1e16a60b0f194a1d7a405b1a2a31e5a336130e8a2a26db6fe1ba6a9b2f6549e54997ae4043b7aa03982f133dd9988c854cdbc2896c5fba97742d7e0c03c737d1450f16180e83b8f758212d573041e53ae5478a3e75979a3b1e6212a153c438f904db6c83410c864698856c36aa6744d3e253a203fc5575a316a5319269e1b2bb11cce7a358932383c9f124aaedad397b60889bfb151ccc4ae328e239ff2ee30b468327e9378cd5b0e38dd6092af090e12523337e97cefde43e85e276255c2bb6c8ba9c014d48573f6290dce11576ad169ab03f172a55ecc73e4a6cc9bb702aa91d6441dc2c34b6aa15b7b3cd1135a99ab7f966506028d0690695e524b61d9ccaad26c2702fe9930f34eded1f31455bfe755fb231e121688e35a9ef3beff99997690fd86ed33e56d0e1945b3756e73a59776f2e3ee75efb1b3dc29848916815d10ce0672d16b33d5045fa8f466ebe9208fb71946aa5734d8fa44a2b28107e517bad88d5e7dd60cd9783650f0d78cd3712e299046ae1fb3f5959bbe3fa2c2c3ac2cb1cbb72bbe8982c9c82b7abe00297b44ee772c1cc9f9c113ce20d60162faccbee6a5e0d76a84920626244c89cf3c6263eb383e416b5b8d519dfc712e8950658ef4b2d7204ab36b1f88cd9dd314f22ebbb555539ca02cd5e001bc9a25b017312fabc580f2f1ac70152735d0d3e4845182a13e5c94a9ccac54dbd451c9d05783ebda0ff8ba0fde09bdf9f412277fb567aa592255cb851e86b01fe278ad55e1e5beb349850a405537ac6febe8caf261cc088e1ce1c5cd42b9539443737970c3b3694182b6f5248e2769f95053a5d7200f98f77a19e1ed8150fc4f0f7390b418cb01ea17da484ef90c8d00064555af621888ebc12000eb8cfaf51ed003f72c2b280a991da48218bffd8886df9bc93b8b2869e8ea528d176800d591b8ebb7317d3dcc465ff81448597f433693a3ea1fb69921279a9d4a411e467827503978dd5edcb02ab36", 0x1000, 0x2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 3.054937036s ago: executing program 0 (id=7843): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd, 0x1, 0x0, "d287202724ca4a48090000003323de4e0b33e71c059706050000ae035b0e363f", 0x34325258}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r1, &(0x7f0000000380)="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", 0x701) 2.986645017s ago: executing program 0 (id=7845): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1c40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4003, 0x101900) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x430502, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2.89514711s ago: executing program 5 (id=7847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1, 0x7, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000000, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4188aea7, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0xa4580, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x80000, 0xffffffffffffffff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0xa80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f00000019c0)={0x48}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000640)}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000200)=""/36, 0x24) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r10}}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086201, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r4, 0x3f23b000) 2.840147638s ago: executing program 0 (id=7848): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7f) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"f7c423861b573e3f9108cd51876745d59f8ef92adce14d41fccd5aab9958cbccc11954a23aa0c13de112974ec767d49a1155521642a094aad5df597fb3b2368d386be1a0f5921ec348dd4f605039c1acc2a323d48410fb11c45ad9a276ddd4e2d290b51eab821e723dd7bbfb27549d2073c90f798929bfd7868545f5ce10b2cea684ec2417cabe8b3d2f39b838f8803857b941d60fa418d47db5142bddec2ca9d32edbb46d3fa37a733fe62ca4f94cc7b250bb238373b1cb1333cce4f055bf48aba8cce361e138c53d52fb6b2534407ad4a67ed90038f680542ec789c8374f40427e29fe28912cd500dc373e391b7e23e60cd22b21ffcf4498586a5ab07253b6fc8e8d73b1678ed80e13024ca97a4b87af61cbc81083f14f796afd93d4b017f4b6ba897efbb9108f5d0a2c85c85b5f7e4036df08b27659802fc99accc8374d51466a2585bb48cc50cb14570f9d2145bae1fd7aebdcf906c4a2ff3ed5d3b3e57bfcac4de62aad099ed7e68c36ffecd95d63bb7b8a0144c89e803d39977636efb421d5d1860f5330b855a175b9a0ecf1973bef0731cab5149ac27633d15dd80279f2a9cb0e0a43439c840bede968503e4951d2d10a8987d19077c4ea05b3d9543411344ff1b81c17f5a51528b77177d9fd503b3baea45bac4efa69a67b71b7d2783109d786180d58df7c1f0bc87b26dbe3075511e1532470d642520544baac15c81b7ccd2344997d3d7cd165fce00db9d38c612d43885dec09770ad7cdf81635f3c96c490edec554f1cd87ce9ec44c0b936f0130bde9fa0b817749194fe2d7468b8cef72bc932113d5f6366a278e7d3ab8f2d8b2acf93304600617fd3500c6c93c7f058495431b3997cd6f51c63d1989840af5d729c877ee066c3292258ecab89a76b75eb62bc381aab1188c01ff4ad0010973ec1426a3fd0597af21286bd6792a031c90fdc4e8785c7712d7830a1e85c41d157d501f065508f75dad63c73d3211da06f17c8ca7f90e6732c0125951f9c7fd21add81a78f39e7bea0af6c8244680813d60527962e7ea7e3422de73f2ef2a3273e0e72b30e1d595914be8b4a7d0ae12e20a7f20f79fe416297eaa3e0773c718d6a05197f564907049b65551a055647c59448f25c1232a5c7276fd0138910a9a48464a46d445a920941197d6138d4d1299ff594f15cf0c5eae87526b60fa2c985f1a93bc6366ab2d61911a9ae23436467f4c6414870c12740863a6b04c4e789d4ace9419346ab202cb022576540e403f9474d2e3d8074b1098b75a81ee49f9d156bf102c8543b1734be454384c9b176b2ff9a75df2f4c919efbebe4ab1915a287d076df6caad1a5cb6e7ab37ef9981716afca7fd28a42cef8394ad4fa09a96cc5690f2c054467a4ca1ca374848051b9ccfa7bc2c4a304940f0a4abe2babb8170896e2a088efda961b2057fb7756be2d3fe81ea2a6fcc66e1827bb339f2f02181e3ec9306f18716a9002e3284923c85fb68c8586dafeb09a5990027cd2b9da6a0b708e9ead2101d9402eee7b4d3b1c21371cf5e579fb4c2c82b5c8cbdb1f794a3237a537ec0ec125e64f342ff802915a966835e2c39a0e37d935d722854b6c09873c2d4c10191831d4cd55bbce54017e5e759ac596d25373ad169c67282e77d416f515dcdef5a7e9529e89931c77ad6e9431253323f5a3ae8dd7373d272048eef1edcf2da6153fae01725bf8413ed1060ac134b8830627a8aad7c24c5c174a3764894c41fec2e105e81a92377083b114e2a0cbcb642fef793d8a2c981194a0f8e88e4ce602a50c7f8611910825be4bf9e0086331280ea75bb3936109d3c3a88f7504ea0f07f77c3c38fe542f16c03cb27725f793b0000ef496a1287837e593aa6a941e2d0614d66f4b090c94b14ab1ee3000a814cd2bd8e51b6e161d9a4fde336f459fa8f39754954141311338e600976aea29b4a1da4023bdc0f314a734741ec49b71a5491ca112c33e9ae127db83219dd02e895e42bedf69349d7944eefda602b31a0819f1645cc4b6840da00d0f91641c9a1739dfbb82d1c7c53fa2cf4123504d7ceb698eb889b7af80e5606a94b0d3c82f07ae674c80343bdd50bd38b8b5b2e402c7ff2e364458cd3f378d301b337ea1b779d26383fa916db2a11c1020c670d3b3941faf47242782ddb151d30b63f873041c154f36ab7b71f63c113b60d3da66d7dfdbf9b472ba3e56d0037bdabf3f3f84cc995ac6647583c35e28b02d021b86520ce817b4d9013a15ad08999f6094e666d2d01ab8d56985b738307951ba8522a12104a7c1e41573598d64586d1e1b8de83695c9f56cbcfc74c0424afe1ec6342a98cd2344e026a0f93c386f842aab4a225c93f9a70aa2c5ab6d9af2459e922c6edbaa502c0f0e47bfeab4511034c2f8a893f3562df7129d826f1d194741c9194476160af5a1d205f7bd423419d78b8630408567b681bf9ec20620cc742bfd01043f20b6a9114d99f79bb4ceb7172b5da9a9aa52a1d36af534676605043238948e966f8a5cd6992b00cf28b97eb507a616d789b34dc50b6ecff4e1aab20d41c7a0aa2154fd381dc76a476af2417b950f1f6ad603925f5a8c7aa2e74da34f488b81838f8a50be8f07bb33e1d9d50fb2d741b63cd780e2633dd23731b99287fee1dc6977dc9a3ee6fa8ddcf68c7341b2e853d93fabf37587767d3d410ce7e222f58cf03e12063e5b111b9b808efd6534cdc7da98cc17db814f292111dc19feceb97728717a58f203bf5a6cb85ce0859f4a313c077345376d14554a2a92847f7a52a1ac3b47fb6f4843a0cb452da0b23bf2cdf650662eb372c51a9ee1b652ee730d3b795d367a79b04a8fe9e1b3fe11fc2b8a5281df961245eb033c8aa274b9ca4555c3ab1eaf7699eef2d4647596784ec2bbc8662b1d2eae5e5aa39e69ecdef284917066424d05648c44306f765b95c560df4f116de53173eb28278023a8045fa7d70e990c57fb2c89c407d3028121f10ff563f71374f22c31b8d75402a055e3766b616573fbb87530ef240a4d1d8b0af2fdf1b8be8805b0ed36af1857504da89ab83fc2f42ebdb3ee5680a91bcc1721a7b2265b04867bb21e7f344bbd8118fb86daafe25da52905a6fc31cab13caee5258c47332a4fc277bae79ae60a0765b8406b35d3c9675aaac691c9a297a0affd6299376630a4b85bcd13f306333c76e6568b8b19954655546bf1530e75e0fe389569df6304312d4f6bb82aec3742903e6b0734b2adde9459f5c5b79d9ad737a272e94919d915c2041c5e1fedbbc76f919348c1c35bdcef24a61b9ce7a841786522c526d81cc3fca4268264fcd3925896c9affff5ba8f22cb7b86dcf6373ad352095181513aefb2e050f13a1ce734b9c67f9664fe43ea0e1d2d00d180c2c7b7fbfa4df524b338f7173535c0decc4a5f52ab9d2f56b5e695dd1b34919159c2e54cb8059e436543794a3e813dce5c6b14a2b33b41b0bbb305837d52511e20bd43e03d4d077773300856d7de3deb5d392b80c19f0423dd6936cd0597de17594bca5e1c19aae1d74eeec127f3d2d68a79c3a58a62c7596c6effc96758a47203a87134ae2124573160d7a47d9d132f1874afa7afcdeb49cbf634dca9c86077dcbce1da7f970ea7f7e54bb8bf4ff04a120a519a441f148115385e05b4d7a33d9e6df3625f899937f20f4fb44f350d534a96b48590ac225d5296744724107418eaf59e74212c21cf9bccc50ddea8017f6ae10528a7ccfca000a179a1e32565bfa36f737c72480c900b62986c77d09f4b7d91ca3c8d6ab43761c89d836b6595473a520fb021fabe9d3be76a70f542b4c5496e229d23c69eaa9b6070031e3664405f8e5c249827225535addf373c44a663be7690ba5b9ea27b733ba549360bd87af8e8341e8eb357b2abd31a23f3b4a0356796f465164bec9f1084f2cd17a89cfea2a19b7b67b0bdcbdfe8211e48ab9452031c94081f5e13720c6a767e90af57c45bc759d533f70105998e7dffb434be7a7f42652245b57ac80f5280124a88f287fac207b4238b854525cd941b29a7ede67a054459edeaa32e8e4763bbb59243833438cf59ef600f268e7fe5d00f4efcab5b8b23f97b55eedfae2026cad38645ac56a2838801e0e6c5c5c2b596000313117712f116c5441b586cfa973e8814c8479ce5f6fcf1b442d10b6e6cc415c06278e982f8d95011f0691c6eb2d607d238ec001cb02beeb527d98a5e40c0f448435b750944dbcb0d15664f43bb0c480dd5693b66629b0840b355b46a52ea7f06da94c5483aefbbae0a1da941a03568954609f85ce3ac6aa49f41e289cf215e5576e959c7445ea6a961698ed56bae60a9b9c51f470cd14516c596b204b14e5cde9ab50d87581b64382ade7ed05b8387824c07c64990714be0a74206fe23b8062d5f7d01be678216fad4e1b425970b73ce29f18efb49f28b1241e49f55fbd148c8c16bf7e3e07f17cab9cb2cb34c8fa86fb6d9584d5593808a0de6c4f9d8e61ac3d067b6b83cd7971671fc0e13d86a7da340b17f7a8550a05e7c1d67bcaed673956802ee516b9799140195677fa580e489e95d7e77f729f581e18c35e17c818e195193dd054567f8db55288b03f033f65a07f6caf885c713c7ad20d8d7b022dcd759430af5a2fff5bc88251e51edbe40144e04f6c5086cda6a4b45f503c2a5781d6a8f682aea1763095f2aa2528ced57c2a5c667a5ebec75c90ea7076e1c97e3070d783bb001587ff79248c2574df75a2559839d41a5d6decbfad6a188f44f3827b7b3aebaaea6cd287fb7c709cb4b50a32bf22ead29df42c4c6b4d9e533dfa708202d1e22f359509e844e4f05d48c80909d2d2341b9147628d043599aa300c466ea361bcd6f9b490b421d39550c236f0d5bdb29be6c60632c6ba7b9923f02126b89bab6c3d4734b438d0a54cb685478b7189c4badab5af7984a80154d5fa4dfd12544d89261727fd4619fbc6cbc4017c3b5a836508d4758dfa11afb309a0037197b8f19cc0f4b1b3f201a1b60063837952ee63901e294a4488d83838b26037ea29d3787efae587ecad357b4a7d9ca77a1096aac2856c8cc8ad2e978f3138125ab1e1acfbc81a6e98b3f4deac26a54a5c87048eeae4b09a9335d56a31541cd0e34ca1edbd8215184e8d9941851be5ce47e21b0009257195b5c7a5231962b19a0c79c75b962fbd088b43e459a3583a47960dd3f741af4487026353652f054216b1b45aab47b6d2d5c90f74f13a51e3a93007ea07fac4ebb7bf04d590b5d0d1250be8a5d899140835b481e2fcd50adb2c03c5d18b600c65f858d382c50409ca12d4a1300702c2cc315a163674361dd081486ba8d822e35f1fc8dcb26899542c713e82b6c607338246dcadbbf3ed3ab17a387caeb099f1cafa9974c87c6ca4679cdafa80d37a4997bb8b5ddf503290c0a8d58000baf8f1993ea50471949213957d3c944d66fe1904fa421b36ded793719eb3da1d9134583957e96ac0825aae5473bff1b7b3e81ae40c631587ba890c381d15c39c0e3d4350bcbc02ede97db07367a4f0d99dafab9ca12ba872ca4ce7382dc468e042ba54f6199875b35b3a6cd76ab86e908ff75737430126ef79d90f7ae56b49ee2ec5a523be94767a8d817f456525ac41d5b2e531bd3fba81452c6a85db57cb0a90ab360835811fce805012054caf0597b4ba96a16fe19db772234dd2d41ca674642394092ebf5f4cd01f662916efeccc65ae1c98efd4e9af47b85b8a1d46fc3551accd39b40c96295517dd5bd733d4281bede0257f32691a1433f2ecf30d64be3bad2f", 0x1000}}, 0x1006) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000010c0)) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000001100)) r3 = syz_open_dev$sg(&(0x7f0000001140), 0x8d, 0x2) write(r3, &(0x7f0000001180)="126528953b4dbf6de9442346e83c1b0823cb3c69f27d38661a58ee783a9b9c231b37654f594002fc85fa93dfa615db0bd5c38fcc8d545f82e0b733f2bcfd7a73a8f2ca79d79021cdf5df5d320d37acb1dbbd714c2db800a8674e8c4840ad4bfb237be785e5de9ba8de0491541f27a1bf683f9378667871d98a5a9c5983fdd864ff1ea3d23502e778656483897651bb1af56ad33d33508722020f5a1ddaf4c72a9ad457f4aa79651789809606ebd4ce66b403ed36ef93fe5ff20a5f9d055f882752d97e52b42f1e1efd04c0943e6bc1fd7960", 0xd2) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000001280)={"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"}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000001680)) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000016c0)=@arm64={0x1, 0x9, 0x4}) r4 = syz_open_dev$video4linux(&(0x7f0000001700), 0x7, 0x4000) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000001740)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001780)={0x1, 0x3, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000001800)=@arm64_sve_vls={0x606000000015ffff, &(0x7f00000017c0)=0x3}) write$UHID_CREATE(r1, &(0x7f0000001900)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001840)=""/164, 0xa4, 0x52, 0x4, 0xffffffff, 0xa, 0x5}}, 0x120) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000001a40)={0xc207, 0x2, 0x1, 0x7}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001a80)) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000003b00)={r1, 0xfad, {0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, "b4f6e9dc8d02ddb447d865d5dd05499eb38a56ca76c10eed4ddbce743160bd0314a037b80aa0d51b09606355987a3faf02c98b769e061da3f8ffa5990fdcabc9", "a8e8fd8cbf93c892056883d4644879ef9966bb6502292186d3e666160594c2286ba21f30bce4470fb5c9ffb2676f95748fafc9a43ffe0fad6849be43f2549938", "7655b5dfec2d29b7af2b99e921472008dee8ce2377e62271dcda30b7fc360f0e", [0xdef, 0x1]}}) r6 = dup(r0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000003c40)={[0x2, 0x3e, 0x1, 0x80000001, 0x2, 0x9, 0x7, 0x4, 0x0, 0x6, 0x8, 0x3, 0x800, 0x6, 0x7ff, 0x9], 0xeeee0000, 0x12010}) close(r4) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000003d00)) ioctl$TCSETA(r6, 0x5406, &(0x7f0000003d40)={0x3, 0x0, 0xe, 0x7f, 0x7, "ae2864736eca7978"}) 2.813912262s ago: executing program 1 (id=7849): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x13, r1, 0xe01a2000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) read(r2, &(0x7f0000000100)=""/48, 0x30) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000002b80)={'geneve1\x00', @local}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r5, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 2.538427959s ago: executing program 5 (id=7850): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x0, 0x6, 0x200}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x7, 0x200}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000910000400eca368072", @ANYRES8=r5, @ANYRES16=r5]) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0xfffffff4, 0x0, 0x0, 0x0, 0x0, "0104004cb0000800000000000000000300"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x53) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x9, 0x0, 'queue0\x00'}) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r8 = openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r8, 0x40045408) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086201, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x5, 0xd2, 0x0, 0x0, @time, {0x0, 0x1}, {0x0, 0x5}, @note={0x6, 0x29, 0x5, 0x0, 0xcde}}], 0x1c) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000200)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) 2.537517196s ago: executing program 1 (id=7851): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x3ff, 0x1007) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x3ff, 0x1007) 2.421509869s ago: executing program 1 (id=7852): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x12) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0x4148, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) 2.40710111s ago: executing program 4 (id=7853): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000001c0)={0x5, 0x1, 0x0, {0xb, 0x1, 0x57, 0x7fffffff}}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000400)={0x14, 0x1, 0xfe}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x12, r5, 0x1000000000000000) 2.110660258s ago: executing program 5 (id=7854): r0 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @irqchip={0x200}}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000200), 0x6) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) read(r1, &(0x7f0000000080)=""/168, 0xa8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000480)=[{&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f00000003c0)=""/151, 0x97}], 0x3, 0x804, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x488, 0x0, 0x6}]}) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r10, &(0x7f000000cd40)={0x2020}, 0x2020) r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) splice(r11, 0xfffffffffffffffe, r11, &(0x7f0000000300)=0x1, 0x9, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d100, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x40011, 0xffffffffffffffff, 0x1000000000000000) 2.109828662s ago: executing program 4 (id=7855): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000af0000/0x1000)=nil, 0x1000, 0x1000007, 0x80010, r1, 0x3e84d000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1.811355642s ago: executing program 4 (id=7856): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd5) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0x9}) preadv2(r1, &(0x7f0000000880)=[{&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000840)=""/56, 0x38}], 0xa, 0xa66, 0x2, 0xf) 1.734408957s ago: executing program 5 (id=7857): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002780), 0x82001, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x3, 0x16, "8488a4fdfbe084d63ff0949eaf464c2ca0df2c"}) read(r0, &(0x7f00000001c0)=""/157, 0x9d) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1}) 1.58774268s ago: executing program 4 (id=7858): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0280, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r5, 0xc008aec1, &(0x7f0000000d00)={"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"}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x61500, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000008003000000100000000600000007000800000000000600000000000000000000000000000001000004000000000400000080000000a24c00000700000009000000000000000000000000000000a5ba9e3746ecc942d6fbfa146c3031fe3abbbae49ee33929d9a9ce4b246fa784c5f2599c5275bea1ef10a1514579a04f8df1f2f85afef8d88a8d7ad22552e1e65259b86bd2d43954c75dd221bc76fde96af9d62c47ee2f6d1b00a4bed941f6d2a12a607dfa44098c33c0e9b9df22cbfb33c0c5ebea5c30"]) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000040)=0x3) close(r2) read$qrtrtun(r6, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000380)=0x7) write$cgroup_devices(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="1e0396ca3c5c980128876360864668f82ffdd569d2f530b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad80806"], 0xffdd) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0) write$cgroup_pid(r0, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 1.55203715s ago: executing program 5 (id=7859): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1.399343103s ago: executing program 1 (id=7860): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010041000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) 1.052393827s ago: executing program 1 (id=7861): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0xf, 0x7, 0x0, 0x0, 0x9, 0xb, 0x22, 0x3, 0x2f, 0x5, 0xe, 0x0, 0x8, 0x3, 0x4, 0x4, 0x4c, 0x8, '\x00', 0x4, 0xfffffffffffffefd}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x4, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x4010, r1, 0xffffc000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x13, 0xffffffffffffffff, 0x1000000000000000) 998.255956ms ago: executing program 5 (id=7862): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000380)={0x0, 0x0, @ioapic}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000a80)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0x40405515, &(0x7f0000001100)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) write$ppp(r4, &(0x7f00000001c0)="38d5", 0x2) ioctl$KDENABIO(r3, 0x4b36) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) 880.500841ms ago: executing program 4 (id=7863): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8e00, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x4000, 0x5}) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314247}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000280)={[0x8, 0x2, 0x6, 0x200, 0x81, 0x5, 0x7f44, 0x40, 0x401, 0x4, 0x4, 0xe7, 0x5, 0x2, 0xfffffbff, 0x9, 0x3, 0xfffff001, 0xff, 0x6, 0x10001, 0x7, 0x1, 0x26016628, 0x4, 0xffffffc5, 0x200, 0x53, 0x3, 0x2, 0x8, 0xe, 0x1, 0x1, 0x80, 0xdb, 0x401, 0xd324, 0x80000001, 0x0, 0x8001, 0x2, 0x7f, 0x5, 0x3, 0x0, 0x70f, 0x1397, 0x4, 0xd, 0x3, 0x3b52, 0x6, 0x3, 0x73, 0x2, 0xffffff27, 0x4, 0x7b19f1c2, 0xfff, 0x4, 0x8, 0x3b4, 0x1, 0x1, 0x0, 0x5, 0xbd0, 0x5, 0x7fff, 0x9, 0x0, 0x8, 0x80, 0x39c, 0x4, 0x1000, 0xe, 0x1400000, 0x7, 0x3, 0xf, 0x0, 0x9, 0x7fffffff, 0x1, 0x8001, 0x5, 0xb, 0x9, 0x7, 0xe, 0xfffffffc, 0x6, 0x40, 0xb, 0xa59, 0x2, 0x7fffffff, 0x5, 0x1, 0x9, 0x4, 0x7ff, 0x1, 0x7c8, 0x7fffffff, 0x80000000, 0x3eb1, 0x7, 0x4, 0x8, 0x4, 0x2, 0x7d5331e0, 0x1ff, 0x7, 0x4, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0x5, 0xd5, 0x7, 0x9, 0x6, 0xffffffff, 0x9, 0x0, 0x2, 0xc2a, 0x2fc9, 0x8000, 0x4, 0x3, 0x61d3, 0x5, 0xfff, 0x2, 0x10000, 0x5, 0x3, 0x8000, 0x3, 0x9ec, 0x8, 0x7b9c, 0xfffffff8, 0x5, 0x8f3, 0x8, 0x5, 0x9, 0x6, 0x7, 0x7ff, 0x4, 0x8, 0xfffffff8, 0xfffffffd, 0x2, 0x7, 0x4, 0x3411, 0x1, 0x100000, 0x7fffffff, 0x6, 0x5, 0x4, 0x4, 0x4, 0x10, 0x3, 0x300, 0x1, 0x4, 0x6, 0x6, 0x30, 0x1, 0x7, 0x6, 0xb, 0x4, 0x8, 0x1, 0xf45, 0x40000000, 0xfbc, 0x0, 0x401, 0x0, 0x8, 0xfffffff4, 0x7, 0x8, 0x3, 0x3, 0xfffffffc, 0x80000001, 0xffff, 0x1, 0x3ff, 0xa7, 0x83e8418, 0x38, 0x1d12000, 0x8, 0x4, 0x63fc, 0xf, 0x3f5a, 0x2b21, 0x8001, 0x9, 0x0, 0xff, 0x7fffffff, 0x800, 0x8001, 0xfffffffc, 0x2, 0x1, 0x1, 0x4, 0x5, 0x3, 0x14, 0x4, 0x6, 0x2, 0xe1, 0x5, 0x0, 0xffff8639, 0x8fa, 0x1, 0xfffffffa, 0x20, 0x7ea2, 0x8, 0x80, 0xc, 0xff, 0x5, 0xaa3, 0xc4de, 0x6d84, 0x7, 0x10000000, 0xd, 0x5, 0x3, 0x102, 0xfff, 0x6, 0x0, 0x3, 0x7e34, 0x8001, 0x38b85a58, 0xc, 0x5, 0x6, 0x216a90f2, 0x7, 0x1000, 0x6, 0xe55, 0xf, 0x4, 0x7f, 0x8, 0x3, 0x1, 0x6, 0x80000000, 0x20, 0xffe, 0x100, 0x40, 0x3, 0x0, 0x7, 0x3, 0x8, 0xe, 0xfff, 0x2, 0xaf9c, 0x5, 0x3, 0x7fffffff, 0x6, 0x600, 0x4, 0xd867, 0x8, 0x0, 0x0, 0x3, 0x5, 0x1, 0xff, 0x3ff, 0x3, 0xfffffff7, 0xfffff19b, 0x0, 0x540c, 0x7, 0x4, 0x1, 0x3, 0x4, 0x5, 0x9, 0x5, 0xd6, 0x5, 0x4, 0x401, 0x0, 0x2, 0x7fffffff, 0xff, 0x1ff, 0x1, 0x11, 0xfffffff9, 0x1, 0x401, 0x882, 0x4, 0x7, 0x7f, 0x1, 0x1, 0xbe7e, 0x6, 0x3, 0x5, 0x80000001, 0x0, 0x6, 0x1, 0x4, 0x400, 0x10001, 0x5d, 0x80, 0xd, 0x3, 0xae91, 0x1, 0x7, 0x8, 0xfffffffa, 0x4, 0x1, 0x6, 0x4, 0xa, 0x80000000, 0xc1b, 0x7, 0x2, 0x3, 0x8000, 0x5, 0x4, 0x81, 0x1000, 0x5, 0x0, 0x0, 0x3ff8, 0x1ff, 0x3, 0xa, 0x7, 0x7666, 0x9, 0x401, 0xfff, 0xfffffff9, 0x90, 0x3, 0x86c82c00, 0x4, 0xfffff903, 0x100, 0xa, 0x0, 0x6, 0xe, 0x2, 0x2, 0x2, 0x463, 0xf, 0x800, 0x9, 0x8, 0x5a373488, 0x1, 0x7f, 0x0, 0x2, 0x401, 0xffffffff, 0xffffffff, 0x5, 0xa3fa, 0x200, 0x5, 0x9, 0xf, 0x1, 0x0, 0x9, 0x1, 0x7, 0x9, 0x3, 0x4, 0x4, 0x8, 0x80000001, 0x6, 0x4cd, 0x2, 0x2, 0x1, 0xf, 0x1, 0x9, 0xc8, 0x5, 0x8, 0x1c, 0x95de, 0x6, 0x1, 0x7, 0x0, 0x5, 0x0, 0x9, 0x94, 0x71, 0xffff33e0, 0x40000, 0x1, 0xcef, 0x4, 0x1, 0x6, 0xac5d, 0x7, 0x1, 0x2, 0x5, 0x1000, 0xffffffff, 0x8, 0x3fe1a43f, 0x9, 0x1000, 0x7, 0xe2e, 0x1000, 0xabb7, 0x8001, 0xe4c, 0x7, 0x6, 0x4c, 0x8, 0x4, 0x4, 0x7, 0x5, 0xa74c00, 0x1, 0x0, 0xffffffff, 0x7fffffff, 0x89, 0x1, 0x400, 0x7, 0xe85, 0xf, 0x8001, 0x0, 0x1ff, 0x8, 0x1, 0x2, 0x2, 0x9, 0x1, 0xf9, 0xfffeffff, 0x4, 0x0, 0x7, 0x2, 0xffffffff, 0x6, 0x1bd4, 0x1, 0x9, 0xfffffffe, 0x100, 0x80000000, 0xb95, 0x8, 0x7f, 0x8, 0xfff, 0x6, 0x1, 0x0, 0x1, 0x7f, 0xff, 0x7, 0x2, 0x9, 0x10, 0x1, 0x4, 0x487, 0x7, 0xffffff4d, 0x101, 0x5, 0x800, 0xf46e, 0xfff, 0x2, 0x4, 0x6, 0x8, 0x427, 0x996c, 0x2, 0xc, 0x400000, 0x3e1b, 0xea91, 0x6, 0x6, 0x4, 0x6, 0xffffffff, 0x967, 0xffff, 0xf22, 0x8, 0xe6, 0x2, 0x1bc, 0x5, 0x3, 0x9f7, 0x4, 0x8, 0xcf2, 0x3, 0x3, 0x1, 0x5f1, 0x9, 0x6, 0x7fff, 0x9, 0x8, 0x0, 0x8, 0xff, 0x3, 0x10001, 0x0, 0x5, 0x5, 0x8, 0xc44, 0xfffffffe, 0x4, 0x4, 0x5, 0x3ff, 0x1, 0x5, 0x85d2, 0x5, 0xfe0000, 0x7, 0xfffffffe, 0x6, 0x5, 0x800, 0x9, 0x2f0, 0x6, 0x6, 0x7, 0x80000000, 0x3, 0x3, 0x4, 0x2, 0x9, 0x1e0, 0x1, 0x40, 0x599c, 0x10001, 0x8, 0x85, 0x7ff, 0xfffffffa, 0x7, 0x4, 0x9, 0x1, 0x835, 0x3, 0xf, 0x3, 0x8, 0x6, 0x5, 0x0, 0x5, 0x2, 0x24ee, 0x79c, 0x1, 0x8001, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x4, 0x6, 0xff, 0x3, 0x0, 0x2, 0x3, 0x9a, 0x7f, 0x7f, 0x4, 0x9c, 0x1, 0xfffffff9, 0x257, 0x6df8d634, 0x5, 0x9b4f, 0x3, 0x3ff, 0x5, 0x4, 0x2, 0xffffffff, 0xffff, 0x4, 0x9, 0x290, 0x1, 0xfffffffe, 0x4, 0x7ff, 0x40000, 0x5, 0x2, 0x5, 0x10001, 0x4, 0x9e, 0xad, 0x3, 0x7, 0x5, 0x10001, 0x8, 0xfff, 0x401, 0x0, 0x0, 0x384da4eb, 0x0, 0x1ff, 0x9, 0x8, 0x9, 0x8, 0x2, 0x5, 0x0, 0x3, 0x2, 0x81, 0xffffff7f, 0x7ff, 0x80ef, 0x3ff, 0x3, 0xfffffffe, 0x23ce757f, 0x3, 0x4, 0x6, 0x2, 0x3, 0x1, 0x5, 0x2, 0xec, 0x6, 0x9, 0x4, 0x2, 0x7fffffff, 0x10000, 0x3, 0x81, 0x853, 0x3, 0x4, 0x3, 0x3, 0x1, 0x8, 0x10000, 0x4, 0x1000, 0x1, 0x3, 0x2, 0xf52f, 0x80, 0x5, 0x5, 0x1, 0x1, 0x1, 0x1, 0x9, 0x5, 0x2, 0xfff00000, 0xe, 0x6, 0x1, 0x10001, 0x4, 0x3ff, 0x200, 0x6, 0x183, 0x3, 0x4002, 0x5, 0x3, 0x8b, 0x86, 0x3, 0x8, 0x0, 0x6, 0xf, 0xfffffff9, 0x1, 0x8, 0x7, 0x416, 0x7, 0x8, 0x6, 0xfffffffc, 0x0, 0xa1c1, 0x5, 0x7, 0xfffffffe, 0x8, 0x7fffffff, 0xffff, 0xce7, 0x2, 0x2, 0xfffff001, 0x4, 0x101, 0x4, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0x6, 0xf, 0x7, 0x7, 0x0, 0x2, 0x99ff, 0xcad, 0x0, 0x1, 0x9, 0x1, 0x9, 0x800, 0x31, 0xa, 0x9, 0x0, 0x0, 0x7, 0x5, 0x5, 0x930, 0x0, 0x6, 0x3a36d6c9, 0x63f8, 0x4, 0x80, 0x401, 0x4, 0x8, 0x80b1, 0x401, 0x0, 0xff, 0x6, 0x8, 0x3, 0x7, 0x10001, 0x2, 0xd, 0x7, 0x10, 0x80000001, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0x6, 0x1, 0x1, 0x0, 0x1, 0xeeb, 0xa4, 0x7, 0x3, 0x1000, 0x6, 0xfffffff9, 0x101, 0x6, 0x200, 0x7, 0x7fffffff, 0x5b, 0x7ff, 0x8, 0x800, 0x9, 0x6, 0x1, 0x8, 0x9, 0x7fff, 0xff, 0x7fffffff, 0xfffffff7, 0x17, 0x0, 0x3, 0x6, 0x0, 0x6, 0x9, 0x8000, 0x5, 0xfffffffa, 0x43d, 0x4, 0x3, 0x2, 0x100, 0x7, 0x1, 0x4, 0xa, 0x4, 0x0, 0x3ff, 0x3e, 0x8, 0x9f8, 0x2, 0x1, 0x6, 0x4, 0xfffffffc, 0x10000, 0x9, 0x5, 0x9, 0x5, 0x9, 0x80, 0x4, 0xe5100000, 0xfff, 0x8d, 0x0, 0x7, 0x1, 0xfffff8ec, 0x3, 0xb4, 0x100, 0x0, 0xfffffff9, 0x1, 0x12000000, 0x4, 0x8001, 0x81, 0x5, 0xc, 0x959, 0x5, 0x2, 0x7fffffff, 0xde2d, 0x0, 0xd, 0x5, 0x6, 0x800, 0x5, 0xa66, 0x4517, 0x800, 0x1, 0x1, 0x9, 0xfffffffd, 0xfffffffa, 0x9, 0x8001, 0x8, 0xfffffffe, 0x6, 0x0, 0x4, 0x0, 0xfffffffe, 0x32, 0x5, 0x0, 0x6, 0xffffffff, 0x0, 0x84, 0x4, 0x180, 0x67fc, 0x3, 0x7, 0x7, 0x2, 0x0, 0x537, 0x5, 0x81, 0x100, 0x5, 0x5, 0xd319, 0x80000000, 0x6, 0x5, 0x3, 0xfffffff7, 0x8001, 0x4, 0x9, 0xcb, 0x400, 0xffff, 0x7, 0x5, 0x7, 0x0, 0x7, 0x0, 0x80000000, 0xb, 0x392, 0x4, 0x4, 0x0, 0x7]}) (rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4188aea7, &(0x7f0000000000)) read(r0, &(0x7f00000001c0)=""/157, 0x9d) 464.519326ms ago: executing program 1 (id=7864): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r6 = dup(r1) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x6, 0x3, 0x7, 0x4, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x5, 0xe, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x181a80, 0x0) r8 = dup(r7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000642000/0x1000)=nil, 0x1000, 0x0, 0x20010, r5, 0x766a000) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000000080)=0x2000) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4, 0x80600}) 237.529229ms ago: executing program 0 (id=7865): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0), 0x2000000000000003, 0xa2583) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc1485544, &(0x7f0000000040)) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) close(r2) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10002) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb6000040"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r10, &(0x7f0000000380)="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", 0x701) (async) write(r10, &(0x7f0000000380)="fb196dec69a10b2284f761ca101022bcc68752cd2a4ddad8fb4427a23a27b90193ac13a4af86fe765f972d765daff264784bbd7bb9758824e951404b348375ddf05290d0ac0d1193da1090cae4ae32d841f14b4463125af7074084be37266ad8ffda263654000bec6327c11e0e3029907058c64629ad771d9b152fdcc2121b2a355ab2a4754e155e74e1a2618acc20f055d7f69bacaeebdecbcede36c675896677245097c7d87c727afc8890a6acabd6dc660bc389ef8379fb67212653aa766c1d6eca7c7b622835696a5e0ba4c04e7ac7263122337c3dc19d7974310bf43a8251cbc75ff3cffeab3d2e0e9d8e3edbd6bccb93185ab0f08af349c81512f0140643a55eb53a6cae06d378ecc95b7772f3b638d6f34b6ddc61e5014a16be5d7167800e5f992a71983d0698ace86ceb24f3f016bfb640c2833bf3bcba65c329d43e65351c89f9b8a392267438a8c10b0022546cdf39bdd0a57084c8d3a79e97bf75aa5409ff114febd2e48a59d118a4396ff5cee71b8d0b34e63343216281cb47a4a28b329de3104068ec02bd2e849a523c3b92c060dd023c3b9968c3329dd076db9c5f377b94168adc3a766b7f7f941cb4c6b507c77864c839770943f504a7f616b9e7c6b3dc2a81c617c0c6e6f5b0a6d0389ceb0da410e8562bdc5bb88de4a47810a21174488a4d3ef8dcba8a033ecd5f2361c8ba179ed58cf88c335433dfc0f0c1ed5716df27cb1823af02a2ca4f89754f3567b2f51b17f8ef04e8ce3e60e8c1d7773e98a4948f5bf5cee4b0732a78e67ab86a677b0d34cb3f852245e466f05618b844213fe8700cc6fc0b6813ba41a113b524709fb15ad68493da36443f83fc3cc25948dac9f32968e693e3b8c15386fdfd21344cec28e6170b2c94f8d2a6cd1c087297a18c82947e60b97e12742fc0ef6007ec136b3429ba2d4ef1b1fa77428fcc626c6eee96174c2a32a8e0cfa8b7cce8a39a8eef0d921cbf35a2a5ea6c1c8fedeb5bc783502b60392752262e38666f7f2eef6153471ddc469d89f911dadb2aeb40615cba6f5c37cd3ee584aed4f950063dbe223469190cd61281008ca4458373f98f9294115089801dda01deb69d56cdb0e10563a0c78045d6564c41bba6e31ab1e2141d5081624d108c8e8ddaafe7099a7114e2552dd46900f0a5aeaccab141175d377ab872f94d23b083c03cac21abd19ed2307264568e111d5927c08547716b5fdc4db72e4e715c35adb6333a3413b5a4b6b62bd82ab3fc52412929d4945c974ca5e42a2f7ec3f4987f1cc697e4dcbeb25a24c8755038c67da8e6b295f60ce900a5b6fd5a9ef3d50ffcb21ccbae6f05203d135f1bdf20d1d03fa044520cd6e7b5ea79c2f21c76914d47df5961ea77087967fc69836e819ba91d6ed2daf2a21c1100a1bb3320997422234b4d166eeb4c1d6498f508c4fbffdbb6fa8971598782d2d5ad10a38f785592151d406bfa8a3b72f35bcd895acc762182f7f56f851d808c0b872ab787472bcc07f311f442cf2755f3fd737b5ebe059d703306eb51f97de3fc62204d0a8ef4032e720dcf2c7afb2ffc0d07b1fe2da1568f44b0fd9979c2b1c69d4895145931dc6de29c0fbaae24607bf445a73237409b9595780bb173ab5938461120a70f64707cb90fa38dfec31259dab069b4a108d8ff7073de4f28fefe9acb318e725ca1d937e987c54b1b7c88b1ff8d82ee78291a4e80ae588d07b8dfe9303cc80172048992932642502d0a34a1135fd9fe480b891feead766a5d0ea906ea90e7e42800ae1d4c2ec23bf98e307c35ca76606e8b261c9a8ddde2d057bb0cfaaf4233f7a3e0ab5eb2565afc2210c2e33f2d63c51afb7d823acf58e6e602f544872dc3821f9c4fbb5e64eeb30de1df52a406fe25d024dde2cf3ce08230830f6359ab499ca38a4b442d56f28fb8a017657b2c241c10f490d3b7904325098ec40e5d90311b08a23446e107ca4a5ac7146764c9daeaaf7d1e288880296b91387ecb75a8f442c3cf29704460144ce5c03b8d74e689a7ff091e2883c1e4a45cfb8d124caab6d8518c983b1d958921c7d02e0d2f881d8379fa01f76ece37b67a59d6692ddcf34badd6d081bae36b43ab6e961409677bfdc445b3bb67ba9ee779af19cb42de9cf2e18ba6e6859152280f69cecf5fe120aaa5a894d0e125ce24fa33e77a90696a367d88d839663b4ce7f195ce6b158f6204c8e380f0b1be2c41b10d8984d55ba4f51262dbd6e3254660604efe5fc8f6ae5e2b3c0a219650060bc40d839b86c5a07247f36f2bf83d282ca0951b056c1ea748785984d5b686dd74618d4e28090ba47aaf2512d03eb21b7e97fdea9197b75da73d8b9a29b566254bd6654f3f1eec1006b7b671301dcb5051c18435f247d366fae034022f5c965a922fe2225bdb7e757daa2e7c2bf8b03be0d4590895c34bd8582ee1d04939b60e4bd28d6e77a243e14e60e6dc9e07297d5b17f54d1c105f1334e7436c498c6c57179ce4b5a835b076e06e41fec35ef4b962fad389c935f77fa5cae0fb19c4d5b9", 0x701) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x14, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x2, 0x0, 0x38415261, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f000008d000/0x3000)=nil, 0x3000, 0x2800005, 0x50, r9, 0x0) (async) mmap(&(0x7f000008d000/0x3000)=nil, 0x3000, 0x2800005, 0x50, r9, 0x0) mmap(&(0x7f0000831000/0x1000)=nil, 0x1000, 0x8, 0x810, r5, 0xf965d000) (async) mmap(&(0x7f0000831000/0x1000)=nil, 0x1000, 0x8, 0x810, r5, 0xf965d000) syz_open_dev$midi(&(0x7f0000000000), 0x8001, 0x600880) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r13 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r13, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '{&:@[', 0x3a, '-\xf3]\xec\xce?^,cE\xf4\xad\x8e\xd0ef\xa0\xd7\xa8|dy\xcd\xf6\xe35\x8d\xf2\xcc?\x03\xcd\xb2\xbd<\xa1\x92\xf8\xc4\xda\xc7\xd33x\x81\x13\x8cY\x85c\x1a8\x1fu\xd4\xda\xdf|FO\x9d\xbc(M\x8f\xea8\xc8\xa8\xe9\xaa\xec=\xdb\xda\xc5\xf9/\xdb', 0x3a, './file0', 0x3a, [0x50]}, 0x7c) 0s ago: executing program 4 (id=7866): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x9, {0xffffffff, 0x300, 0x300, 0x300}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000005c0)) read(r0, &(0x7f0000000600)=""/159, 0x9f) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000e66000/0x3000)=nil, 0x3000, 0x6, 0x30, r2, 0x1941c000) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000440)={0x18, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f00000003c0)={0xfffffffffffffdd6, 0x3, r8, 0x0, 0xb, 0x2a, &(0x7f0000000080)="17667848ede09e95ea1048a753cb32c204000000bf9aca7138d4f74014a29c1515335fa7eaf14ccde436"}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x4, 0x0, 0x0, 0x6d, &(0x7f00000004c0)="0ba5ac9d3a4ecea165984e44e0d2270248a717723144cdbf2f03e6ef225c50485846ed71b03de5bdf77d7fe4dfd90fd8b3fcf43884cd41aed7077473d1ab87e4f11216fc03fe7117200eed251726dd9190f5915d1225151b7c5f610c4f2aa55763ecca2edb287f430ac59d5917", 0x3ff}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r12}) ioctl$LOOP_CHANGE_FD(r2, 0x4c02, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): Dev loop8: unable to read RDB block 7 [ 851.610133][T14783] loop8: unable to read partition table [ 851.646159][T14783] loop8: partition table beyond EOD, truncated [ 851.655727][T14783] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 851.898962][T14803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.530753][T14840] loop8: detected capacity change from 0 to 7 [ 852.547024][T14840] Dev loop8: unable to read RDB block 7 [ 852.562381][T14840] loop8: unable to read partition table [ 852.568569][T14840] loop8: partition table beyond EOD, truncated [ 852.587805][T14840] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 852.693479][T14849] random: crng reseeded on system resumption [ 852.946793][T14854] input: syz1 as /devices/virtual/input/input240 [ 853.233315][T14882] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 853.495854][T14898] input: syz1 as /devices/virtual/input/input241 [ 853.816168][T14912] loop8: detected capacity change from 0 to 7 [ 853.825688][T13837] Dev loop8: unable to read RDB block 7 [ 853.840479][T13837] loop8: unable to read partition table [ 853.847574][T13837] loop8: partition table beyond EOD, truncated [ 853.870366][T14912] Dev loop8: unable to read RDB block 7 [ 853.882527][T14912] loop8: unable to read partition table [ 853.903587][T14912] loop8: partition table beyond EOD, truncated [ 853.924248][T14912] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 854.351677][T14935] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 854.605747][T14944] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 854.759621][T14955] loop8: detected capacity change from 0 to 7 [ 854.794860][T14960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.812826][T14955] Dev loop8: unable to read RDB block 7 [ 854.819915][T14955] loop8: unable to read partition table [ 854.833068][T14955] loop8: partition table beyond EOD, truncated [ 854.860748][T14955] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 855.075303][T14974] loop8: detected capacity change from 0 to 7 [ 855.092588][T14975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.132295][T14974] Dev loop8: unable to read RDB block 7 [ 855.153220][T14974] loop8: unable to read partition table [ 855.159289][T14974] loop8: partition table beyond EOD, truncated [ 855.179853][T14974] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 855.765597][T15008] loop8: detected capacity change from 0 to 7 [ 855.766948][T15008] Dev loop8: unable to read RDB block 7 [ 855.766996][T15008] loop8: unable to read partition table [ 855.767212][T15008] loop8: partition table beyond EOD, truncated [ 855.767232][T15008] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 855.945930][T15017] loop8: detected capacity change from 0 to 7 [ 855.948627][T13837] Dev loop8: unable to read RDB block 7 [ 855.948682][T13837] loop8: unable to read partition table [ 855.948963][T13837] loop8: partition table beyond EOD, truncated [ 855.963786][T15017] Dev loop8: unable to read RDB block 7 [ 855.963843][T15017] loop8: unable to read partition table [ 855.964079][T15017] loop8: partition table beyond EOD, truncated [ 855.964103][T15017] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 856.751358][T15060] loop8: detected capacity change from 0 to 7 [ 856.769304][T13837] Dev loop8: unable to read RDB block 7 [ 856.778129][T13837] loop8: unable to read partition table [ 856.790256][T13837] loop8: partition table beyond EOD, truncated [ 856.800243][T15060] Dev loop8: unable to read RDB block 7 [ 856.805907][T15060] loop8: unable to read partition table [ 856.824198][T15060] loop8: partition table beyond EOD, truncated [ 856.840725][T15060] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 857.902543][T15116] mkiss: ax0: crc mode is auto. [ 858.325374][T15145] loop8: detected capacity change from 0 to 7 [ 858.356188][T15145] Dev loop8: unable to read RDB block 7 [ 858.387088][T15145] loop8: unable to read partition table [ 858.398039][T15152] blktrace: Concurrent blktraces are not allowed on loop7 [ 858.407851][T15152] blktrace: Concurrent blktraces are not allowed on loop7 [ 858.420239][T15145] loop8: partition table beyond EOD, truncated [ 858.433596][T15145] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 858.520983][T15155] tap0: tun_chr_ioctl cmd 1074025677 [ 858.527177][T15155] tap0: linktype set to 776 [ 858.840315][T26004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.842585][T26004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.858639][T26004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.863757][T26004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.874190][T26004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 858.911797][ T1152] Bluetooth: hci4: Frame reassembly failed (-84) [ 859.225400][T13860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.632955][T13860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.967916][T13860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.125539][T15232] loop8: detected capacity change from 0 to 7 [ 860.137071][T13837] Dev loop8: unable to read RDB block 7 [ 860.146775][T13860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.157571][T13837] loop8: unable to read partition table [ 860.168844][T13837] loop8: partition table beyond EOD, truncated [ 860.189056][T15232] Dev loop8: unable to read RDB block 7 [ 860.206023][T15232] loop8: unable to read partition table [ 860.224046][T15232] loop8: partition table beyond EOD, truncated [ 860.244730][T15232] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 860.685851][T15173] chnl_net:caif_netlink_parms(): no params data found [ 860.923543][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 860.931778][ T9230] Bluetooth: hci1: command tx timeout [ 860.938549][T26004] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 861.144510][T15434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.203225][T13860] bridge_slave_1: left allmulticast mode [ 861.209604][T13860] bridge_slave_1: left promiscuous mode [ 861.220913][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.238022][T13860] bridge_slave_0: left allmulticast mode [ 861.244286][T13860] bridge_slave_0: left promiscuous mode [ 861.250968][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.822843][T15505] ubi31: detaching mtd0 [ 861.841818][T15505] ubi31: mtd0 is detached [ 862.161569][T15537] loop8: detected capacity change from 0 to 7 [ 862.191403][T15537] Dev loop8: unable to read RDB block 7 [ 862.197253][T15537] loop8: unable to read partition table [ 862.224886][T15537] loop8: partition table beyond EOD, truncated [ 862.236924][T15537] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 862.248635][T15539] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 862.381004][T15546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.986764][T15572] syz.5.6551: attempt to access beyond end of device [ 862.986764][T15572] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 863.000219][T26004] Bluetooth: hci1: command tx timeout [ 863.297632][T15620] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 863.596171][T15671] loop8: detected capacity change from 0 to 7 [ 863.647805][T15671] Dev loop8: unable to read RDB block 7 [ 863.685803][T15671] loop8: unable to read partition table [ 863.721535][T15671] loop8: partition table beyond EOD, truncated [ 863.745846][T15671] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 864.015550][T13860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.086032][T13860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.115709][T15736] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 864.145152][T13860] bond0 (unregistering): Released all slaves [ 864.525779][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.560017][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.580981][T15173] bridge_slave_0: entered allmulticast mode [ 864.597224][T15173] bridge_slave_0: entered promiscuous mode [ 864.622670][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.641877][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.649473][T15173] bridge_slave_1: entered allmulticast mode [ 864.678700][T15173] bridge_slave_1: entered promiscuous mode [ 864.878959][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.890788][T15811] loop8: detected capacity change from 0 to 7 [ 864.911292][T15811] Dev loop8: unable to read RDB block 7 [ 864.917800][T15811] loop8: unable to read partition table [ 864.957508][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.969253][T15811] loop8: partition table beyond EOD, truncated [ 864.992962][T15811] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 865.079922][T26004] Bluetooth: hci1: command tx timeout [ 865.433648][T15173] team0: Port device team_slave_0 added [ 865.468818][T15879] block nbd4: NBD_DISCONNECT [ 865.554997][T15173] team0: Port device team_slave_1 added [ 865.741144][T13860] hsr_slave_0: left promiscuous mode [ 865.785714][T13860] hsr_slave_1: left promiscuous mode [ 865.812221][T13860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.840370][T13860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.859057][T13860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.874414][T13860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.951786][T13860] veth1_macvtap: left promiscuous mode [ 865.957987][T13860] veth0_macvtap: left promiscuous mode [ 865.995570][T13860] veth1_vlan: left promiscuous mode [ 866.015665][T13860] veth0_vlan: left promiscuous mode [ 866.430317][T15934] loop8: detected capacity change from 0 to 7 [ 866.472031][T15934] Dev loop8: unable to read RDB block 7 [ 866.477856][T15934] loop8: unable to read partition table [ 866.556586][T15934] loop8: partition table beyond EOD, truncated [ 866.587220][T15934] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 867.006796][T15950] input: syz1 as /devices/virtual/input/input243 [ 867.031053][T15950] QAT: failed to copy from user cfg_data. [ 867.163720][T26004] Bluetooth: hci1: command tx timeout [ 867.537289][T15973] loop6: detected capacity change from 0 to 524287999 [ 867.591322][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.601356][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.611301][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 867.621524][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 867.631721][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.641764][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.651905][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 867.661914][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 867.672149][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.682160][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 867.838947][T15964] ALSA: mixer_oss: invalid OSS volume '' [ 869.027878][T16129] binder: 16128:16129 ioctl c0046209 0 returned -22 [ 869.124291][T16133] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 869.488136][T13860] team0 (unregistering): Port device team_slave_1 removed [ 869.566153][T16148] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 869.713258][T16153] loop8: detected capacity change from 0 to 7 [ 869.725993][T13860] team0 (unregistering): Port device team_slave_0 removed [ 869.734644][T13837] Dev loop8: unable to read RDB block 7 [ 869.749380][T13837] loop8: unable to read partition table [ 869.771642][T13837] loop8: partition table beyond EOD, truncated [ 869.784138][T16153] Dev loop8: unable to read RDB block 7 [ 869.795459][T16153] loop8: unable to read partition table [ 869.812052][T16153] loop8: partition table beyond EOD, truncated [ 869.825124][T16153] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 869.937263][T16160] dlm: non-version read from control device 2 [ 870.127896][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.135228][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.992600][T16190] loop8: detected capacity change from 0 to 7 [ 871.005175][T16190] Dev loop8: unable to read RDB block 7 [ 871.013484][T16190] loop8: unable to read partition table [ 871.020130][T16190] loop8: partition table beyond EOD, truncated [ 871.036013][T16190] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 871.452306][T16204] ALSA: seq fatal error: cannot create timer (-22) [ 872.113906][T16216] binder: 16215:16216 ioctl 40046210 ffffffffffffffff returned -14 [ 872.469925][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.477050][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.525379][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.538932][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.558828][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.585676][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.592920][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.791061][T16278] QAT: Device 253 not found [ 872.845192][T15173] hsr_slave_0: entered promiscuous mode [ 872.882615][T15173] hsr_slave_1: entered promiscuous mode [ 872.913898][T15173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.926913][T15173] Cannot create hsr debugfs directory [ 873.389050][T16358] random: crng reseeded on system resumption [ 874.178182][T16403] program syz.5.6611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.888195][T15173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 874.923540][T15173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 874.949541][T15173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 874.973927][T15173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 875.377089][T15173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.465788][T15173] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.513706][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.521989][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.575749][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.583036][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.905572][T16503] loop8: detected capacity change from 0 to 7 [ 875.980011][T16503] Dev loop8: unable to read RDB block 7 [ 875.980064][T16503] loop8: unable to read partition table [ 875.980286][T16503] loop8: partition table beyond EOD, truncated [ 875.980321][T16503] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 876.444460][T15173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.569050][T15173] veth0_vlan: entered promiscuous mode [ 876.598072][T15173] veth1_vlan: entered promiscuous mode [ 876.712679][T15173] veth0_macvtap: entered promiscuous mode [ 876.752076][T15173] veth1_macvtap: entered promiscuous mode [ 876.812603][T15173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.855096][T15173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.906281][T15173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.929776][T15173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.970431][T15173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.000737][T15173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.218147][T16547] loop8: detected capacity change from 0 to 7 [ 877.232939][T16550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.277957][T16547] Dev loop8: unable to read RDB block 7 [ 877.312554][T16547] loop8: unable to read partition table [ 877.325122][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.346666][T16547] loop8: partition table beyond EOD, truncated [ 877.355307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.397210][T16547] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 877.463923][T13860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.497938][T13860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.858761][T16591] syz.0.6633: attempt to access beyond end of device [ 877.858761][T16591] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 878.112294][T16602] random: crng reseeded on system resumption [ 878.171313][T16602] block nbd0: NBD_DISCONNECT [ 878.301872][T16607] loop8: detected capacity change from 0 to 7 [ 878.323670][T16607] Dev loop8: unable to read RDB block 7 [ 878.329369][T16607] loop8: unable to read partition table [ 878.354747][T16607] loop8: partition table beyond EOD, truncated [ 878.383469][T16607] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 878.672857][T16630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.239430][T16659] dlm: plock device version mismatch: kernel (1.2.0), user (0.6.16) [ 879.365795][T16672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.559615][T16687] loop8: detected capacity change from 0 to 7 [ 879.591453][T16687] Dev loop8: unable to read RDB block 7 [ 879.629975][T16687] loop8: unable to read partition table [ 879.650497][T16687] loop8: partition table beyond EOD, truncated [ 879.679962][T16687] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 880.734806][T16737] syz.5.6657: attempt to access beyond end of device [ 880.734806][T16737] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 883.933795][T16886] loop8: detected capacity change from 0 to 7 [ 883.934873][T16886] Dev loop8: unable to read RDB block 7 [ 883.934922][T16886] loop8: unable to read partition table [ 883.935143][T16886] loop8: partition table beyond EOD, truncated [ 883.935165][T16886] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 884.230662][T16911] usb usb8: usbfs: process 16911 (syz.5.6694) did not claim interface 0 before use [ 886.519920][T16922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 886.519963][T26004] Bluetooth: hci2: command 0x0c1a tx timeout [ 886.533853][T16922] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 887.373353][T16922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 887.386326][T16922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 887.392919][T16922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 887.404235][T16922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 887.521532][T16957] loop8: detected capacity change from 0 to 7 [ 887.533527][T16957] Dev loop8: unable to read RDB block 7 [ 887.541009][T16957] loop8: unable to read partition table [ 887.547189][T16957] loop8: partition table beyond EOD, truncated [ 887.577097][T16957] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 888.101747][T16994] loop8: detected capacity change from 0 to 7 [ 888.156032][T16994] Dev loop8: unable to read RDB block 7 [ 888.177578][T16994] loop8: unable to read partition table [ 888.191986][T16994] loop8: partition table beyond EOD, truncated [ 888.221610][T16994] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 888.440712][T17017] loop8: detected capacity change from 0 to 7 [ 888.450775][T17017] Dev loop8: unable to read RDB block 7 [ 888.456627][T17017] loop8: unable to read partition table [ 888.464477][T17017] loop8: partition table beyond EOD, truncated [ 888.474457][T17017] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 888.600072][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 888.778355][T17035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 888.919136][T17048] loop8: detected capacity change from 0 to 7 [ 888.962578][T17048] Dev loop8: unable to read RDB block 7 [ 888.969449][T17048] loop8: unable to read partition table [ 888.977770][T17048] loop8: partition table beyond EOD, truncated [ 888.986905][T17048] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 889.399856][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 890.103861][T17103] loop8: detected capacity change from 0 to 7 [ 890.108701][T13837] Dev loop8: unable to read RDB block 7 [ 890.108759][T13837] loop8: unable to read partition table [ 890.109205][T13837] loop8: partition table beyond EOD, truncated [ 890.132066][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 890.132192][T26004] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 890.133531][T17103] Dev loop8: unable to read RDB block 7 [ 890.133577][T17103] loop8: unable to read partition table [ 890.133784][T17103] loop8: partition table beyond EOD, truncated [ 890.133821][T17103] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 890.679968][T26004] Bluetooth: hci2: command 0x0c1a tx timeout [ 891.008306][T17160] QAT: Invalid ioctl 21531 [ 891.028262][ T30] audit: type=1800 audit(1750419238.536:114): pid=17160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6740" name="memory.events" dev="tmpfs" ino=2489 res=0 errno=0 [ 891.050126][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.206762][T17170] loop8: detected capacity change from 0 to 7 [ 891.231635][T17170] Dev loop8: unable to read RDB block 7 [ 891.238043][T17170] loop8: unable to read partition table [ 891.248457][T17170] loop8: partition table beyond EOD, truncated [ 891.262407][T17170] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 891.479882][T26004] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.674762][T17199] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 891.684136][T17206] input: syz1 as /devices/virtual/input/input247 [ 891.817606][T17212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.872772][T17212] [U]  [ 891.875964][T17212] [U] K{С [ 891.879479][T17212] [U] ─T О1╩└┬КкF╠╟─F╦К╬`G╩J╟Ш▄G╓╞п╣мбЧ▐╚O╒╤/▄MC╟ [ 891.893520][T17212] [U] TЮ╪Ц/,Э~И─ЬнЛJ╒▀╩}8╬╩▐'O1П▄"Щ7-╬ВJQЬKЧдW║╧Q╔5C%"мH12ЦжYУДЙЮА╩X═`ИВ═╚╝`+│█(╖┬┐!(╔█╔Z'└TXLN╗IоG┼JЦа░▄▌н╖P┼~ў7═!С╒╥"╪и╬ ╛к(╚5ИOB▄дЗ═ГJ╓ [ 891.917611][T17212] [U] ▒K\&Ч}6г6ЬX╬HXП е╘╡Д╠▐.`╕AУ$█40|╧╢┐Б9░╪▐иДп└ ╧UВ╥4Н╘─оVBZ├╨}╠W╘MФT║О═QЯ▌╬жRТ 4Ф▀ [ 891.935577][T17212] [U] ".H6╪▐"╓K├З[ЫЙдМJ┴4╟╪IЭNиЩ[Z(ХДC|T╦]Z{Б┬3ЯC=╗иX╬╘Ю╦Е╬4┐WЙ)\TСXJ╪ПSH{Q;╠╣вЕ╓T╘╟+ЛжўG═╚▀оDД.╦В│>YЮРў╔WUHДFNЧОЭ╟HL]S╘2К╟┘\G%КO╝&Z)╡╨Ъ'иPULВ_<├ в╪░Й╥о╘┼`╥▒T╘┴▐Ь╨╦▐;_╘"(СU{7JЬ┐2X С/А'▌┘C╤╠╒I║й└╧H┐CЭ╒│ЮVж=НСAI╟%W╝ESЮ RЪЯJК╬ЬГ┌ФG┬ўR┴╣═бHIШвЬA╧╠6-┌DП┌Vи┴ I"╪┼N╞и ▐┌ASC~4┴к╣8C╪*нOO5/▀ЬJЪ~║збWЧVK+моЙМ3╚╟Y)О╣M░╕╞V╢╠YQ╞╜АDTRпOTPEM%F╫╩EJ═A5╞╘T_-X~а^AA█В╥Ш╜Q╓┼ [ 891.971721][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.000520][T17212] [U] +БWЙG?]г╙'A: ╗┌)╒╧╙ЩУ' B>TвабF/Щў<'╚U╙'Ц╝HзI╔.+]EЯ.╜-╔┐▀┐╥%ў╚>2`╢^U▀8F.К6д┼3╙╪+╦A╛┬ллД░G3╙P┬╙6:Н^0└ПT╔╚Vў'E╒T╝А█┬YCЙN╛▐R╧й▐N╚PJ╫ ;╞ZЖ╩╘╤█С8!п╚\┘Е╕A╪╩Ц2┴г$╨╡Щ┬нWI.═╟#К╚/BAI╝Б─`╨┴4JТ╘D╬Y@╙ZД▄GWў5╦┐B─ ╡┘ЬаN╙Y"VI2█╠ [ 892.038558][T17212] [U] ╘Tж_K5╕TмYJ╨▐╬9╨╒C╩$BRЯL┌NUL ╢▄9W╚▌═|ЮG┼"╩Г╞%╟┌╢╩Cк╪Э░╢║Q╬┘ Я╟3Л╞Qп╘N^HP*╜▄$ ╡.╬7Y╙▒Ь2│ [ 892.052460][T17222] usb usb8: usbfs: process 17222 (syz.4.6751) did not claim interface 0 before use [ 892.067938][T17212] [U] ╜?Бй▀ H▄─*┘┴Ф╬3═Э7▄╔Н╛^#QЭ"0~З В╨(╔O╧X LМBг,'V╬╙=Л▌╦C╠SлЕТGВS╢▐0Х╓ВЛ┘`ШЫЮ┘ЗЯЖ=1(ў╬╛ЩўP#╥2DO*╔Г [ 892.084089][T17212] [U] йS╣УGЮ╡▓╢УШGU╨╘D-{╕Щ┬|&УПоЯЯ╤Р2╡ЫL▐C_йЬ!`и═OZ╓евB╢│%>╩R╤╢╓W╧З▌ОSS┬H"гYA4гO.ЪY┘█─ПДRT╘╢МB┌[+/< [ 932.474450][T18819] dump_stack_lvl+0x189/0x250 [ 932.474491][T18819] ? __pfx____ratelimit+0x10/0x10 [ 932.474525][T18819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.474550][T18819] ? __pfx__printk+0x10/0x10 [ 932.474580][T18819] ? __pfx___might_resched+0x10/0x10 [ 932.474604][T18819] ? fs_reclaim_acquire+0x7d/0x100 [ 932.474640][T18819] should_fail_ex+0x414/0x560 [ 932.474673][T18819] should_failslab+0xa8/0x100 [ 932.474703][T18819] __kmalloc_noprof+0xcb/0x4f0 [ 932.474728][T18819] ? kfree+0x4d/0x440 [ 932.474748][T18819] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 932.474781][T18819] tomoyo_realpath_from_path+0xe3/0x5d0 [ 932.474808][T18819] ? tomoyo_domain+0xd9/0x130 [ 932.474839][T18819] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 932.474873][T18819] tomoyo_path_number_perm+0x1e8/0x5a0 [ 932.474910][T18819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 932.474961][T18819] ? __lock_acquire+0xab9/0xd20 [ 932.475004][T18819] ? __fget_files+0x2a/0x420 [ 932.475038][T18819] ? __fget_files+0x2a/0x420 [ 932.475067][T18819] ? __fget_files+0x3a0/0x420 [ 932.475096][T18819] ? __fget_files+0x2a/0x420 [ 932.475132][T18819] security_file_ioctl+0xcb/0x2d0 [ 932.475167][T18819] __se_sys_ioctl+0x47/0x170 [ 932.475196][T18819] do_syscall_64+0xfa/0x3b0 [ 932.475217][T18819] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.475249][T18819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.475270][T18819] ? clear_bhb_loop+0x60/0xb0 [ 932.475295][T18819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.475316][T18819] RIP: 0033:0x7fa13c58e929 [ 932.475335][T18819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.475354][T18819] RSP: 002b:00007fa13d45f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.475377][T18819] RAX: ffffffffffffffda RBX: 00007fa13c7b5fa0 RCX: 00007fa13c58e929 [ 932.475393][T18819] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 932.475407][T18819] RBP: 00007fa13d45f090 R08: 0000000000000000 R09: 0000000000000000 [ 932.475420][T18819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.475433][T18819] R13: 0000000000000000 R14: 00007fa13c7b5fa0 R15: 00007fff599e5178 [ 932.475471][T18819] [ 932.475481][T18819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 932.975700][T18839] loop8: detected capacity change from 0 to 7 [ 933.033932][T18525] Dev loop8: unable to read RDB block 7 [ 933.050471][T18525] loop8: unable to read partition table [ 933.057261][T18525] loop8: partition table beyond EOD, truncated [ 933.084708][T18839] Dev loop8: unable to read RDB block 7 [ 933.103522][T18839] loop8: unable to read partition table [ 933.113968][T18845] kvm: kvm [18844]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 933.123397][T18839] loop8: partition table beyond EOD, truncated [ 933.132868][T18839] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 933.903280][T18878] syz.1.7061: attempt to access beyond end of device [ 933.903280][T18878] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 934.225603][T18892] loop8: detected capacity change from 0 to 7 [ 934.248592][T18892] Dev loop8: unable to read RDB block 7 [ 934.265089][T18892] loop8: unable to read partition table [ 934.294485][T18892] loop8: partition table beyond EOD, truncated [ 934.335120][T18892] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 935.037741][T18927] can0: slcan on ptm0. [ 935.124890][T18926] can0 (unregistered): slcan off ptm0. [ 935.625941][T18970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.954482][T18990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.029024][T18994] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 936.870759][T19034] loop8: detected capacity change from 0 to 7 [ 936.889026][T19034] Dev loop8: unable to read RDB block 7 [ 936.920572][T19034] loop8: unable to read partition table [ 936.948933][T19034] loop8: partition table beyond EOD, truncated [ 936.973740][T19034] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 937.340553][T19063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 937.396499][T19063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.785453][T19094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.009495][T19108] loop8: detected capacity change from 0 to 7 [ 938.024942][T19108] Dev loop8: unable to read RDB block 7 [ 938.024996][T19108] loop8: unable to read partition table [ 938.025226][T19108] loop8: partition table beyond EOD, truncated [ 938.025270][T19108] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 938.195348][T19116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.330389][T19182] loop8: detected capacity change from 0 to 7 [ 939.342986][T19182] Dev loop8: unable to read RDB block 7 [ 939.359216][T19182] loop8: unable to read partition table [ 939.370037][T19182] loop8: partition table beyond EOD, truncated [ 939.387497][T19182] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 939.666229][T19197] misc userio: No port type given on /dev/userio [ 939.702155][T19197] misc userio: The device must be registered before sending interrupts [ 939.759824][T19209] misc userio: The device must be registered before sending interrupts [ 939.860604][ T5881] hid (null): invalid report_size 1050974429 [ 939.868527][ T5881] hid (null): unknown global tag 0xe [ 939.878482][ T5881] hid (null): invalid report_size 31203 [ 939.972287][ T5881] hid (null): report_id 2486410150 is invalid [ 939.978471][ T5881] hid (null): unknown global tag 0xe [ 939.997245][ T5881] hid (null): report_id 1878483837 is invalid [ 940.020088][ T5881] hid-generic 0003:12000:10000.000E: unknown main item tag 0x6 [ 940.028214][ T5881] hid-generic 0003:12000:10000.000E: unknown main item tag 0x5 [ 940.074684][ T5881] hid-generic 0003:12000:10000.000E: invalid report_size 1050974429 [ 940.079873][T19221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.110306][ T5881] hid-generic 0003:12000:10000.000E: item 0 4 1 7 parsing failed [ 940.140559][ T5881] hid-generic 0003:12000:10000.000E: probe with driver hid-generic failed with error -22 [ 940.407896][T19234] kvm: user requested TSC rate below hardware speed [ 940.944240][T19266] syz.5.7137: attempt to access beyond end of device [ 940.944240][T19266] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 941.192601][T19286] loop8: detected capacity change from 0 to 7 [ 941.206159][T19286] Dev loop8: unable to read RDB block 7 [ 941.213859][T19286] loop8: unable to read partition table [ 941.255945][T19286] loop8: partition table beyond EOD, truncated [ 941.279862][T19286] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 942.638612][T19366] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 944.388298][T19437] input: syz0 as /devices/virtual/input/input259 [ 944.973385][T19468] syz.4.7185: attempt to access beyond end of device [ 944.973385][T19468] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 945.306097][T19483] binder: 19482:19483 ioctl c018620c 200000000140 returned -1 [ 946.034576][T19515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.209268][T19537] FAULT_INJECTION: forcing a failure. [ 946.209268][T19537] name failslab, interval 1, probability 0, space 0, times 0 [ 946.209376][T19537] CPU: 0 UID: 0 PID: 19537 Comm: syz.5.7198 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 946.209402][T19537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.209416][T19537] Call Trace: [ 946.209425][T19537] [ 946.209435][T19537] dump_stack_lvl+0x189/0x250 [ 946.209464][T19537] ? __pfx____ratelimit+0x10/0x10 [ 946.209498][T19537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.209523][T19537] ? __pfx__printk+0x10/0x10 [ 946.209554][T19537] ? __pfx___might_resched+0x10/0x10 [ 946.209590][T19537] ? fs_reclaim_acquire+0x7d/0x100 [ 946.209627][T19537] should_fail_ex+0x414/0x560 [ 946.209665][T19537] should_failslab+0xa8/0x100 [ 946.209694][T19537] __kmalloc_cache_noprof+0x70/0x3d0 [ 946.209718][T19537] ? vkms_plane_duplicate_state+0x8d/0x110 [ 946.209754][T19537] vkms_plane_duplicate_state+0x8d/0x110 [ 946.209786][T19537] drm_atomic_get_plane_state+0x25d/0x5a0 [ 946.209816][T19537] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 946.209865][T19537] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 946.209922][T19537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 946.209958][T19537] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 946.209997][T19537] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 946.210041][T19537] fb_pan_display+0x39b/0x680 [ 946.210064][T19537] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 946.210096][T19537] bit_update_start+0x4d/0x1e0 [ 946.210121][T19537] fbcon_switch+0x1565/0x2040 [ 946.210156][T19537] ? __pfx_fbcon_switch+0x10/0x10 [ 946.210196][T19537] ? __pfx_hide_cursor+0x10/0x10 [ 946.210223][T19537] ? __local_bh_disable_ip+0xf1/0x190 [ 946.210252][T19537] ? is_console_locked+0x9/0x20 [ 946.210277][T19537] ? set_origin+0x346/0x480 [ 946.210309][T19537] redraw_screen+0x56d/0xe90 [ 946.210349][T19537] ? __pfx_redraw_screen+0x10/0x10 [ 946.210383][T19537] ? is_console_locked+0x9/0x20 [ 946.210407][T19537] ? fbcon_clear_margins+0x283/0x410 [ 946.210443][T19537] fbcon_do_set_font+0xb3d/0x1120 [ 946.210491][T19537] con_font_op+0xcac/0x1070 [ 946.210524][T19537] ? __pfx_con_font_op+0x10/0x10 [ 946.210550][T19537] ? __might_fault+0xb0/0x130 [ 946.210608][T19537] vt_ioctl+0x1a8a/0x1f00 [ 946.210645][T19537] ? __pfx_vt_ioctl+0x10/0x10 [ 946.210690][T19537] ? __fget_files+0x2a/0x420 [ 946.210726][T19537] ? __fget_files+0x3a0/0x420 [ 946.210756][T19537] ? __fget_files+0x2a/0x420 [ 946.210791][T19537] tty_ioctl+0x926/0xde0 [ 946.210813][T19537] ? __pfx_tty_ioctl+0x10/0x10 [ 946.210834][T19537] __se_sys_ioctl+0xfc/0x170 [ 946.210864][T19537] do_syscall_64+0xfa/0x3b0 [ 946.210884][T19537] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.210917][T19537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.210938][T19537] ? clear_bhb_loop+0x60/0xb0 [ 946.210963][T19537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.210983][T19537] RIP: 0033:0x7fa13c58e929 [ 946.211003][T19537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.211022][T19537] RSP: 002b:00007fa13d45f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.211045][T19537] RAX: ffffffffffffffda RBX: 00007fa13c7b5fa0 RCX: 00007fa13c58e929 [ 946.211061][T19537] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 946.211074][T19537] RBP: 00007fa13d45f090 R08: 0000000000000000 R09: 0000000000000000 [ 946.211087][T19537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.211100][T19537] R13: 0000000000000000 R14: 00007fa13c7b5fa0 R15: 00007fff599e5178 [ 946.211135][T19537] [ 948.267271][T19620] syz.1.7218: attempt to access beyond end of device [ 948.267271][T19620] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 948.703465][T19650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 949.392673][T26004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 949.405515][T26004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 949.415312][T26004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 949.435387][T26004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 949.444630][T26004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 949.595011][T19683] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 949.874300][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.067252][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.242199][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.284941][T19711] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 950.495504][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.037863][T19671] chnl_net:caif_netlink_parms(): no params data found [ 951.065717][ T3522] bridge_slave_1: left allmulticast mode [ 951.073695][ T3522] bridge_slave_1: left promiscuous mode [ 951.079738][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.133055][ T3522] bridge_slave_0: left allmulticast mode [ 951.139501][ T3522] bridge_slave_0: left promiscuous mode [ 951.172563][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.560203][T26004] Bluetooth: hci3: command tx timeout [ 951.791526][T19873] input: syz1 as /devices/virtual/input/input262 [ 951.896026][T19886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 951.996905][T19893] syz.4.7253: attempt to access beyond end of device [ 951.996905][T19893] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 953.123752][T19945] loop8: detected capacity change from 0 to 7 [ 953.134920][T17902] Dev loop8: unable to read RDB block 7 [ 953.143135][T17902] loop8: unable to read partition table [ 953.149325][T17902] loop8: partition table beyond EOD, truncated [ 953.166926][T19945] Dev loop8: unable to read RDB block 7 [ 953.173549][T19945] loop8: unable to read partition table [ 953.179578][T19945] loop8: partition table beyond EOD, truncated [ 953.186654][T19945] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 953.227201][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.252687][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.269283][ T3522] bond0 (unregistering): Released all slaves [ 953.639956][T26004] Bluetooth: hci3: command tx timeout [ 953.795541][T19671] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.820698][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.835448][T19671] bridge_slave_0: entered allmulticast mode [ 953.861673][T19671] bridge_slave_0: entered promiscuous mode [ 953.882868][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.894709][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.899794][T19940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.903505][T19671] bridge_slave_1: entered allmulticast mode [ 953.917958][T19940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.926195][T19940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 953.936243][T19940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 953.946563][T19671] bridge_slave_1: entered promiscuous mode [ 954.011397][T19940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 954.249388][ T3522] hsr_slave_0: left promiscuous mode [ 954.270526][ T3522] hsr_slave_1: left promiscuous mode [ 954.291231][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.298781][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.360883][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.368727][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.458310][ T3522] veth1_macvtap: left promiscuous mode [ 954.497410][ T3522] veth0_macvtap: left promiscuous mode [ 954.518217][ T3522] veth1_vlan: left promiscuous mode [ 954.525181][ T3522] veth0_vlan: left promiscuous mode [ 954.946790][T20079] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 955.399996][T26004] Bluetooth: hci2: command 0x0c1a tx timeout [ 955.960224][T26004] Bluetooth: hci3: command 0x0419 tx timeout [ 955.962003][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 956.732904][T20103] loop8: detected capacity change from 0 to 7 [ 956.741941][T20103] Dev loop8: unable to read RDB block 7 [ 956.747850][T20103] loop8: unable to read partition table [ 956.754375][T20103] loop8: partition table beyond EOD, truncated [ 956.761350][T20103] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 956.876745][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 957.103279][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 958.039836][ T5838] Bluetooth: hci3: command 0x0419 tx timeout [ 958.504326][T20130] random: crng reseeded on system resumption [ 958.596774][T20133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.120278][ T5838] Bluetooth: hci3: command 0x0419 tx timeout [ 960.297818][T19671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.321813][T19671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.635062][T19671] team0: Port device team_slave_0 added [ 960.652471][T19671] team0: Port device team_slave_1 added [ 960.912652][T19671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.922057][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.954045][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.010295][T19671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.052821][T19671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.100319][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.128152][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.277832][T19671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.585700][T19671] hsr_slave_0: entered promiscuous mode [ 961.600992][T19671] hsr_slave_1: entered promiscuous mode [ 961.608431][T19671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.654535][T19671] Cannot create hsr debugfs directory [ 961.888056][T20292] QAT: Invalid ioctl 1077456506 [ 962.209591][ T5838] Bluetooth: hci3: command 0x0419 tx timeout [ 962.523857][T20357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.573273][T19671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 963.626872][T19671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 963.693409][T19671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 963.725015][T19671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 963.915720][T20471] PM: Enabling pm_trace changes system date and time during resume. [ 963.915720][T20471] PM: Correct system time has to be restored manually after resume. [ 964.044871][T19671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.135696][T19671] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.190715][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.190848][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.224833][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.224937][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.291369][T20483] loop8: detected capacity change from 0 to 7 [ 964.296089][T20483] Dev loop8: unable to read RDB block 7 [ 964.296139][T20483] loop8: unable to read partition table [ 964.296509][T20483] loop8: partition table beyond EOD, truncated [ 964.357127][T20483] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 965.095710][T19671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.286654][T19671] veth0_vlan: entered promiscuous mode [ 965.319226][T19671] veth1_vlan: entered promiscuous mode [ 965.402831][T19671] veth0_macvtap: entered promiscuous mode [ 965.422700][T20527] loop8: detected capacity change from 0 to 7 [ 965.443601][T19671] veth1_macvtap: entered promiscuous mode [ 965.454339][T20527] Dev loop8: unable to read RDB block 7 [ 965.473391][T20527] loop8: unable to read partition table [ 965.483518][T20527] loop8: partition table beyond EOD, truncated [ 965.514792][T20527] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 965.547614][T19671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.595781][T19671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.643574][T19671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.664654][T19671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.687182][T19671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.705910][T19671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.908284][T20547] program syz.1.7326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.977947][T20555] program syz.1.7326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 966.006671][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.034392][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.082740][T20555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 966.221574][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.253434][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.112235][T20639] PM: Enabling pm_trace changes system date and time during resume. [ 968.112235][T20639] PM: Correct system time has to be restored manually after resume. [ 968.220858][T26004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.240451][T26004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.249254][T26004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.265172][T26004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.277907][T26004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.664331][T20683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.791277][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.917442][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.994412][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.104845][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.353712][ T1152] bridge_slave_1: left allmulticast mode [ 969.361852][ T1152] bridge_slave_1: left promiscuous mode [ 969.368277][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.384779][ T1152] bridge_slave_0: left allmulticast mode [ 969.392978][ T1152] bridge_slave_0: left promiscuous mode [ 969.399076][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.451944][T20689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 969.463853][T20689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.474502][T20689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 969.484601][T20689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.502290][T20689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 969.525855][T20689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 969.597595][T20727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 969.676225][T20733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.781354][T20737] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 970.360153][T20754] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 970.761000][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 970.966902][T20779] ubi31: attaching mtd0 [ 970.986692][T20779] ubi31: scanning is finished [ 971.173909][T20779] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 971.185046][T20779] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 971.192917][T20779] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 971.203545][T20779] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 971.211797][T20779] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 971.219292][T20779] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 971.258676][T20779] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 933239284 [ 971.271443][T20779] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 971.285754][T20789] ubi31: background thread "ubi_bgt31d" started, PID 20789 [ 971.481924][ T5838] Bluetooth: hci3: command 0x0419 tx timeout [ 971.488075][T26004] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.579793][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 971.680440][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.750423][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.799447][ T1152] bond0 (unregistering): Released all slaves [ 971.978396][T20813] loop6: detected capacity change from 0 to 524287999 [ 972.562529][T20907] Failed to get privilege flags for destination (handle=0x0:0x0) [ 972.760035][T20645] chnl_net:caif_netlink_parms(): no params data found [ 972.895933][ T1152] hsr_slave_0: left promiscuous mode [ 972.930123][ T1152] hsr_slave_1: left promiscuous mode [ 972.942267][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.977426][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.031074][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.049928][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.078123][ T1152] veth1_macvtap: left promiscuous mode [ 973.101894][ T1152] veth0_macvtap: left promiscuous mode [ 973.118363][ T1152] veth1_vlan: left promiscuous mode [ 973.130121][ T1152] veth0_vlan: left promiscuous mode [ 973.640077][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 975.405199][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 975.646365][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 975.721199][T26004] Bluetooth: hci0: command 0x041b tx timeout [ 977.800063][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 978.370219][T20645] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.388371][T20645] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.408114][T20645] bridge_slave_0: entered allmulticast mode [ 978.423465][T20645] bridge_slave_0: entered promiscuous mode [ 978.433722][T20645] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.489905][T20645] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.497274][T20645] bridge_slave_1: entered allmulticast mode [ 978.531779][T20645] bridge_slave_1: entered promiscuous mode [ 978.833746][T20645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.893091][T20645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.970459][T21135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.054753][T21134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.074516][T21132] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 979.085934][T20645] team0: Port device team_slave_0 added [ 979.134042][T20645] team0: Port device team_slave_1 added [ 979.266184][T20645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.285241][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.311450][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.350296][T20645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.373932][T20645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.385698][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.411687][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.446422][T20645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.658175][T20645] hsr_slave_0: entered promiscuous mode [ 979.702311][T20645] hsr_slave_1: entered promiscuous mode [ 979.831984][T21252] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 979.881749][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 981.521351][T21410] syz.1.7392: attempt to access beyond end of device [ 981.521351][T21410] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 981.831671][T21422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.937095][T20645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 981.960515][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 981.986134][T20645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 982.024181][T20645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 982.046776][T20645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 982.206735][T21452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.411725][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.573335][T20645] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.613939][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.621233][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.713258][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.720535][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.495941][T20645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.720122][T21503] loop6: detected capacity change from 0 to 524287999 [ 983.747922][T21508] loop8: detected capacity change from 0 to 7 [ 983.773935][T21509] blk_print_req_error: 54 callbacks suppressed [ 983.773956][T21509] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 80 prio class 0 [ 983.775685][T21508] Dev loop8: unable to read RDB block 7 [ 983.818622][T21508] loop8: unable to read partition table [ 983.858191][T21508] loop8: partition table beyond EOD, truncated [ 983.909563][T21508] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 984.133953][T21526] loop8: detected capacity change from 0 to 7 [ 984.177706][T21526] Dev loop8: unable to read RDB block 7 [ 984.203441][T21526] loop8: unable to read partition table [ 984.234373][T21526] loop8: partition table beyond EOD, truncated [ 984.305597][T21526] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 984.662557][T20645] veth0_vlan: entered promiscuous mode [ 984.731849][T20645] veth1_vlan: entered promiscuous mode [ 984.861477][T20645] veth0_macvtap: entered promiscuous mode [ 984.910771][T20645] veth1_macvtap: entered promiscuous mode [ 984.976742][T20645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.054495][T20645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.096646][T20645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.124287][T20645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.143499][T20645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.167054][T20645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.401085][T21576] loop8: detected capacity change from 0 to 7 [ 985.429965][T21576] Dev loop8: unable to read RDB block 7 [ 985.447951][T21576] loop8: unable to read partition table [ 985.464852][T21576] loop8: partition table beyond EOD, truncated [ 985.485769][T21576] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 985.491420][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.530783][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.637703][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.656756][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.613799][T21634] loop8: detected capacity change from 0 to 7 [ 986.672883][T21634] Dev loop8: unable to read RDB block 7 [ 986.678586][T21634] loop8: unable to read partition table [ 986.743290][T21634] loop8: partition table beyond EOD, truncated [ 986.779072][T21634] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 987.383383][T21648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 987.400785][T21648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 988.131366][T21695] loop8: detected capacity change from 0 to 7 [ 988.164970][T18525] Dev loop8: unable to read RDB block 7 [ 988.188990][T18525] loop8: unable to read partition table [ 988.206333][T18525] loop8: partition table beyond EOD, truncated [ 988.228721][T21695] Dev loop8: unable to read RDB block 7 [ 988.270318][T21695] loop8: unable to read partition table [ 988.270557][T21695] loop8: partition table beyond EOD, truncated [ 988.270593][T21695] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 989.641504][T21770] loop8: detected capacity change from 0 to 7 [ 989.661275][T21770] Dev loop8: unable to read RDB block 7 [ 989.667502][T21770] loop8: unable to read partition table [ 989.682586][T21770] loop8: partition table beyond EOD, truncated [ 989.688849][T21770] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 989.765523][T21777] syz.0.7446: attempt to access beyond end of device [ 989.765523][T21777] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 990.327473][T21809] binder: 21808:21809 ioctl c0306201 200000000300 returned -22 [ 992.450514][T21921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.715831][T21941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.935891][T21956] program syz.5.7487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.006008][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.014120][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.833767][T22039] random: crng reseeded on system resumption [ 995.575338][T22076] loop8: detected capacity change from 0 to 7 [ 995.585612][T18525] Dev loop8: unable to read RDB block 7 [ 995.592462][T18525] loop8: unable to read partition table [ 995.598465][T18525] loop8: partition table beyond EOD, truncated [ 995.614842][T22076] Dev loop8: unable to read RDB block 7 [ 995.624813][T22076] loop8: unable to read partition table [ 995.656707][T22076] loop8: partition table beyond EOD, truncated [ 995.665088][T22076] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 995.751123][T22083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.974592][T22097] sp0: Synchronizing with TNC [ 996.546676][T22125] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 996.554542][T22125] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 996.828391][T22139] loop8: detected capacity change from 0 to 7 [ 996.869886][T22139] Dev loop8: unable to read RDB block 7 [ 996.876063][T22139] loop8: unable to read partition table [ 996.948849][T22139] loop8: partition table beyond EOD, truncated [ 996.959506][T22139] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 997.232905][T22155] loop8: detected capacity change from 0 to 7 [ 997.263903][T22155] Dev loop8: unable to read RDB block 7 [ 997.294525][T22155] loop8: unable to read partition table [ 997.320666][T22155] loop8: partition table beyond EOD, truncated [ 997.340540][T22155] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 998.686889][T22222] ALSA: seq fatal error: cannot create timer (-19) [ 998.702025][T22222] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 998.772641][T22239] ALSA: mixer_oss: invalid OSS volume '' [ 998.903960][T22248] dlm: non-version read from control device 2 [ 999.146201][T22256] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 999.477217][T22265] usb usb8: usbfs: process 22265 (syz.4.7552) did not claim interface 0 before use [ 1001.043810][T22456] [U]  [ 1001.674769][T22487] input: syz1 as /devices/virtual/input/input274 [ 1001.886581][T22499] loop8: detected capacity change from 0 to 7 [ 1001.923564][T22499] Dev loop8: unable to read RDB block 7 [ 1001.929254][T22499] loop8: unable to read partition table [ 1001.948172][T22499] loop8: partition table beyond EOD, truncated [ 1001.957663][T22499] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1002.087567][T22509] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.141436][T22511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.585750][T22542] loop8: detected capacity change from 0 to 7 [ 1002.594610][T22542] Dev loop8: unable to read RDB block 7 [ 1002.616351][T22542] loop8: unable to read partition table [ 1002.622516][T22542] loop8: partition table beyond EOD, truncated [ 1002.651286][T22542] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1003.186101][T22586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.223377][T22589] loop8: detected capacity change from 0 to 7 [ 1003.272711][T22342] Dev loop8: unable to read RDB block 7 [ 1003.278395][T22342] loop8: unable to read partition table [ 1003.292740][T22342] loop8: partition table beyond EOD, truncated [ 1003.332946][T22589] Dev loop8: unable to read RDB block 7 [ 1003.344948][T22589] loop8: unable to read partition table [ 1003.364023][T22589] loop8: partition table beyond EOD, truncated [ 1003.380040][T22589] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1003.708724][ T30] audit: type=1400 audit(1750419351.216:116): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22612 comm="syz.0.7606" [ 1004.207585][T22626] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1004.268078][T22633] loop8: detected capacity change from 0 to 7 [ 1004.281044][T22342] Dev loop8: unable to read RDB block 7 [ 1004.286698][T22342] loop8: unable to read partition table [ 1004.307175][T22342] loop8: partition table beyond EOD, truncated [ 1004.318704][T22633] Dev loop8: unable to read RDB block 7 [ 1004.334302][T22633] loop8: unable to read partition table [ 1004.343143][T22633] loop8: partition table beyond EOD, truncated [ 1004.357574][T22633] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1004.670635][T22652] syz.1.7617: attempt to access beyond end of device [ 1004.670635][T22652] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1005.053541][T22683] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1005.415315][T22713] syz.0.7633: attempt to access beyond end of device [ 1005.415315][T22713] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1005.672401][T22718] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 1005.975061][T22748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.061289][T22756] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1007.087202][T22821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.543780][T22842] syz.1.7664: attempt to access beyond end of device [ 1007.543780][T22842] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1008.104765][T22859] binder: 22858:22859 ioctl c0306201 200000000300 returned -22 [ 1008.345032][T22869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1008.389002][T22869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.437000][T22874] binder: 22873:22874 ioctl c0306201 0 returned -14 [ 1008.475702][T22874] binder: 22873:22874 ioctl c0306201 2000000000c0 returned -11 [ 1008.785988][T22892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.332577][T22963] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 1010.833604][T22994] loop8: detected capacity change from 0 to 7 [ 1010.867985][T18525] Dev loop8: unable to read RDB block 7 [ 1010.889292][T18525] loop8: unable to read partition table [ 1010.897851][T18525] loop8: partition table beyond EOD, truncated [ 1010.919889][T22994] Dev loop8: unable to read RDB block 7 [ 1010.935764][T22994] loop8: unable to read partition table [ 1010.962752][T22994] loop8: partition table beyond EOD, truncated [ 1010.969064][T22994] loop_reread_partitions: partition scan of loop8 (■швлx№^>рЦ Б) failed (rc=-5) [ 1011.244982][T23017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.324948][ T1152] Bluetooth: hci4: Frame reassembly failed (-90) [ 1011.442933][T23033] random: crng reseeded on system resumption [ 1012.385339][T23061] mkiss: ax0: crc mode is auto. [ 1012.830708][T23083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1012.871090][T23083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.324957][T23109] input: syz1 as /devices/virtual/input/input279 [ 1013.400037][T26004] Bluetooth: hci4: command 0x1003 tx timeout [ 1013.407314][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1014.013402][T23138] Bluetooth: hci4: Frame reassembly failed (-84) [ 1014.014994][T26004] Bluetooth: hci4: unexpected event 0x04 length: 0 < 10 [ 1014.034440][T23137] Bluetooth: hci4: Frame reassembly failed (-84) [ 1014.054429][T23138] Bluetooth: hci4: Frame reassembly failed (-84) [ 1014.073496][ T3522] Bluetooth: hci4: Frame reassembly failed (-84) [ 1014.367385][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.378507][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.393816][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.402552][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.412520][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.422975][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.431375][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.439067][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.448101][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.462112][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.475600][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.479893][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.491381][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.499203][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.513903][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.526475][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.527130][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.545518][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.555376][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.561112][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.570792][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.577976][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.578314][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.591585][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.603325][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.611337][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.627506][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.635560][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.640196][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.644911][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.658903][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.665533][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.675401][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.687374][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.690977][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.696715][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.709762][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.715413][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.717393][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.717423][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.726375][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.749620][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.757528][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.766322][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.768015][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.782010][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.792040][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.793813][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.799477][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.815944][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.840335][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.843467][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.855769][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.864109][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.867973][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.880540][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.890697][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.898298][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.906778][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.919543][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.919909][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.932062][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.943863][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.944954][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.953781][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.967485][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.979202][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1014.980030][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1014.996880][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.005189][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.006340][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.013447][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.028754][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.036357][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.047167][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.054926][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.059879][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.065972][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.077193][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.085603][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.085639][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.085667][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.085694][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.085719][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.095971][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.132867][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.133394][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.152155][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.153351][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.159582][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.168713][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.176644][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.190534][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.196720][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.199487][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.213375][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.229219][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.239016][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.240895][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.253022][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.256536][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.269211][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.277802][ T5876] hid-generic 0008:0400:0006.000F: unknown main item tag 0x0 [ 1015.285402][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285439][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285466][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285493][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285520][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285547][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285575][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285602][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285629][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285656][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285684][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285711][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285738][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285765][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285798][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285826][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285853][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.285879][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.301495][ T5876] hid-generic 0008:0400:0006.000F: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 1015.438906][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.459784][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.467372][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.489781][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.497434][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.529736][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.537222][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.547452][T23192] fido_id[23192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1015.561616][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.569072][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.588126][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.596086][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.605917][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.613460][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.621754][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.629298][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.636865][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.645581][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.657740][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.673584][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.681243][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.688731][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.699538][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.710496][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.718171][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.728931][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.736489][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.753331][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.761894][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.776961][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.788522][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.796320][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.807038][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.818161][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.829773][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.837457][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.848647][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.865347][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.873915][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.899879][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.907377][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.921399][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.928921][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.937500][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.945224][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.953126][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.960862][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.971404][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.978916][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.988994][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1015.997486][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.007400][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.017905][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.025561][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.033212][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.041084][T26004] Bluetooth: hci4: command 0x1003 tx timeout [ 1016.041240][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1016.047423][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.102593][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.125038][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.143222][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.152915][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.172052][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.193472][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.213259][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.224954][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.235809][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.243518][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.259797][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.267457][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.290843][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.298927][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.318056][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.333329][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.341141][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.347076][T23223] usb usb1: usbfs: process 23223 (syz.5.7739) did not claim interface 0 before use [ 1016.348567][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.368889][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.376756][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.394388][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.405627][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.416371][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.436138][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.446661][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.460880][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.468866][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.478119][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.486838][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.496884][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.505264][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.515513][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.533314][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.544537][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.556698][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.565606][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.575551][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.583932][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.594084][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.602533][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.612471][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.620940][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.636195][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.646046][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.659307][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.668102][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.678320][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.689281][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.699241][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.707563][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.726425][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.738326][T23231] loop8: detected capacity change from 0 to 7 [ 1016.739584][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.750735][T23231] Dev loop8: unable to read RDB block 7 [ 1016.757103][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.758305][T23231] loop8: unable to read partition table [ 1016.765475][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.777591][T23231] loop8: partition table beyond EOD, truncated [ 1016.778586][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.790163][T23231] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1016.801067][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.809064][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.821859][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.829491][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.839318][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.847885][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.857461][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.866277][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.874035][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.883292][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.892685][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.906435][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.916900][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.925543][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.933417][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.946097][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.954152][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.967254][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.975324][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.983545][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1016.995381][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.003281][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.011812][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.019923][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.042371][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.069953][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.095507][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.103638][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.111553][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.119184][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.130976][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.138471][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.168094][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.178284][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.186318][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.194995][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.205213][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.213069][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.222405][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.230369][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.238011][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.260418][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.268073][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.276057][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.284131][ T10] hid-generic 01FF:0004:0400.0010: unknown main item tag 0x0 [ 1017.295237][ T10] hid-generic 01FF:0004:0400.0010: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1017.458462][T23254] fido_id[23254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1017.527765][T23261] loop8: detected capacity change from 0 to 7 [ 1017.552804][T23261] Dev loop8: unable to read RDB block 7 [ 1017.575847][T23261] loop8: unable to read partition table [ 1017.584496][T23267] syz.0.7748: attempt to access beyond end of device [ 1017.584496][T23267] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1017.598572][T23261] loop8: partition table beyond EOD, truncated [ 1017.622323][T23261] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1017.911747][ T30] audit: type=1800 audit(1750419365.426:117): pid=23281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7750" name="dmabuf" dev="dmabuf" ino=41 res=0 errno=0 [ 1018.358574][T23303] random: crng reseeded on system resumption [ 1018.929360][T23324] loop8: detected capacity change from 0 to 7 [ 1018.949309][T23324] Dev loop8: unable to read RDB block 7 [ 1019.001889][T23324] loop8: unable to read partition table [ 1019.028825][T23324] loop8: partition table beyond EOD, truncated [ 1019.047098][T23324] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1019.618675][T23364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.653378][T23364] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1019.832650][T23384] random: crng reseeded on system resumption [ 1022.278944][T23517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.418570][T23530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.711617][T23552] tap0: tun_chr_ioctl cmd 1074025680 [ 1023.524177][T23598] loop8: detected capacity change from 0 to 7 [ 1023.541858][T23598] Dev loop8: unable to read RDB block 7 [ 1023.549801][T23598] loop8: unable to read partition table [ 1023.557258][T23598] loop8: partition table beyond EOD, truncated [ 1023.577342][T23598] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1023.628625][ T132] Bluetooth: hci4: Frame reassembly failed (-84) [ 1023.677162][T23608] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1024.213391][T23627] usb usb8: usbfs: process 23627 (syz.5.7825) did not claim interface 32 before use [ 1024.237633][T23629] syz.5.7825: attempt to access beyond end of device [ 1024.237633][T23629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1025.211874][T23667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.280950][T23675] snd_dummy snd_dummy.0: control 1:254:0:syz0:0 is already present [ 1025.448581][T23683] Invalid logical block size (2) [ 1025.460525][T23683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.640393][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1025.640807][ T9230] Bluetooth: hci4: command 0x1003 tx timeout [ 1026.278707][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.300806][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.310412][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.321253][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.329153][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.353630][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.374792][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.392070][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.411186][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.430739][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.451877][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.470395][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.493204][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.508040][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.516875][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.531278][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.549805][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.557852][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.568997][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.589517][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.614105][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.630215][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.686842][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.695752][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.718171][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.744352][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.759211][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.776987][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.845025][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.864254][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.874273][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.882525][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.890795][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.899330][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.933937][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.942465][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.951529][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.959612][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.968899][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.979589][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1026.992898][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.001427][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.010257][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.023434][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.032152][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.040508][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.048703][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.057143][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.077040][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.102028][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.124534][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.199464][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.212880][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.222576][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.243185][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.260064][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.268070][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.299778][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.319852][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.327898][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.346558][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.355578][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.369974][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.387509][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.403923][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.423527][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.439879][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.447756][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.473811][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.501457][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.520056][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.528017][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.549874][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.557727][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.588073][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.603175][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.612284][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.623529][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.646564][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.677896][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.700014][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.707828][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.726262][T23790] loop8: detected capacity change from 0 to 7 [ 1027.734578][T23790] Dev loop8: unable to read RDB block 7 [ 1027.745229][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.757660][T23790] loop8: unable to read partition table [ 1027.763484][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.773132][T23790] loop8: partition table beyond EOD, truncated [ 1027.786160][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.795238][T23790] loop_reread_partitions: partition scan of loop8 (    ) failed (rc=-5) [ 1027.819818][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.827682][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.890546][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.899256][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.922908][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.933190][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.941155][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.959096][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1027.994207][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.013989][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.028418][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.048175][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.079981][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.087897][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.117918][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.190039][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198730][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198770][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198799][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198826][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198854][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198882][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198910][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198937][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198964][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.198990][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199014][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199040][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199066][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199093][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199120][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199146][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199173][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199201][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199227][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199253][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199281][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199307][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199333][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199360][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199388][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199416][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199443][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199470][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199497][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199525][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199552][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199580][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.199606][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.489864][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.497743][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.507944][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.529022][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.537442][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.546972][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.590003][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.611466][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.619498][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.619530][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.619555][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.619581][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.619607][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.640884][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.640923][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.640952][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.640979][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641007][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641033][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641060][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641087][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641115][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641142][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641170][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641197][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641224][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641252][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641279][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641306][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.641334][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: unknown main item tag 0x0 [ 1028.644354][ T6076] hid-generic 0052:0004:FFFFFFFF.0011: hidraw0: HID v0.0a Device [syz0] on syz0 [ 1028.816382][T23841] fido_id[23841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1029.229786][T23865] ================================================================== [ 1029.283540][T23865] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.292166][T23865] Write of size 2880 at addr ffffc9000c309500 by task vivid-000-vid-c/23865 [ 1029.301200][T23865] [ 1029.303627][T23865] CPU: 0 UID: 0 PID: 23865 Comm: vivid-000-vid-c Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 1029.303649][T23865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.303661][T23865] Call Trace: [ 1029.303669][T23865] [ 1029.303677][T23865] dump_stack_lvl+0x189/0x250 [ 1029.303702][T23865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.303721][T23865] ? __pfx__printk+0x10/0x10 [ 1029.303740][T23865] ? __pfx__printk+0x10/0x10 [ 1029.303756][T23865] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1029.303783][T23865] ? __virt_addr_valid+0xdc/0x5c0 [ 1029.303806][T23865] print_report+0xd2/0x2b0 [ 1029.303828][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.303856][T23865] kasan_report+0x118/0x150 [ 1029.303879][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.303908][T23865] kasan_check_range+0x2b0/0x2c0 [ 1029.303930][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.303957][T23865] __asan_memcpy+0x40/0x70 [ 1029.303974][T23865] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.304030][T23865] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1029.304076][T23865] ? ktime_get+0x3e/0x1f0 [ 1029.304100][T23865] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1029.304133][T23865] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.304163][T23865] vivid_thread_vid_cap+0x8da/0x10d0 [ 1029.304199][T23865] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1029.304224][T23865] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1029.304249][T23865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1029.304276][T23865] ? __kthread_parkme+0x7b/0x200 [ 1029.304297][T23865] ? __kthread_parkme+0x1a1/0x200 [ 1029.304319][T23865] kthread+0x70e/0x8a0 [ 1029.304343][T23865] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1029.304367][T23865] ? __pfx_kthread+0x10/0x10 [ 1029.304391][T23865] ? _raw_spin_unlock_irq+0x23/0x50 [ 1029.304414][T23865] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.304439][T23865] ? __pfx_kthread+0x10/0x10 [ 1029.304461][T23865] ret_from_fork+0x3f9/0x770 [ 1029.304479][T23865] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.304498][T23865] ? __switch_to_asm+0x39/0x70 [ 1029.304518][T23865] ? __switch_to_asm+0x33/0x70 [ 1029.304539][T23865] ? __pfx_kthread+0x10/0x10 [ 1029.304561][T23865] ret_from_fork_asm+0x1a/0x30 [ 1029.304589][T23865] [ 1029.304604][T23865] [ 1029.529496][T23865] The buggy address belongs to the virtual mapping at [ 1029.529496][T23865] [ffffc9000c301000, ffffc9000c30b000) created by: [ 1029.529496][T23865] vb2_vmalloc_alloc+0xef/0x340 [ 1029.547771][T23865] [ 1029.550124][T23865] The buggy address belongs to the physical page: [ 1029.556573][T23865] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65213 [ 1029.565465][T23865] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1029.572684][T23865] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1029.581286][T23865] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1029.589896][T23865] page dumped because: kasan: bad access detected [ 1029.596348][T23865] page_owner tracks the page as allocated [ 1029.602072][T23865] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23864, tgid 23861 (syz.4.7866), ts 1029206457504, free_ts 1028541117657 [ 1029.621724][T23865] post_alloc_hook+0x240/0x2a0 [ 1029.626531][T23865] get_page_from_freelist+0x21e4/0x22c0 [ 1029.632099][T23865] __alloc_frozen_pages_noprof+0x181/0x370 [ 1029.637928][T23865] alloc_pages_mpol+0x232/0x4a0 [ 1029.642800][T23865] alloc_pages_noprof+0xa9/0x190 [ 1029.647758][T23865] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1029.653760][T23865] vmalloc_user_noprof+0xad/0xf0 [ 1029.658746][T23865] vb2_vmalloc_alloc+0xef/0x340 [ 1029.663621][T23865] __vb2_queue_alloc+0x9c2/0x15a0 [ 1029.668657][T23865] vb2_core_reqbufs+0xc31/0x1420 [ 1029.673632][T23865] __vb2_init_fileio+0x318/0xff0 [ 1029.678596][T23865] __vb2_perform_fileio+0x284/0x1600 [ 1029.683918][T23865] vb2_fop_read+0x273/0x360 [ 1029.688438][T23865] v4l2_read+0x199/0x2c0 [ 1029.692695][T23865] vfs_read+0x1fd/0x980 [ 1029.696868][T23865] ksys_read+0x145/0x250 [ 1029.701141][T23865] page last free pid 15 tgid 15 stack trace: [ 1029.707144][T23865] __free_frozen_pages+0xc71/0xe70 [ 1029.712376][T23865] __tlb_remove_table+0x2d2/0x3b0 [ 1029.717434][T23865] tlb_remove_table_rcu+0x85/0x100 [ 1029.722573][T23865] rcu_core+0xca5/0x1710 [ 1029.726837][T23865] handle_softirqs+0x286/0x870 [ 1029.731704][T23865] run_ksoftirqd+0x9b/0x100 [ 1029.736236][T23865] smpboot_thread_fn+0x53f/0xa60 [ 1029.741189][T23865] kthread+0x70e/0x8a0 [ 1029.745313][T23865] ret_from_fork+0x3f9/0x770 [ 1029.749919][T23865] ret_from_fork_asm+0x1a/0x30 [ 1029.754703][T23865] [ 1029.757040][T23865] Memory state around the buggy address: [ 1029.762687][T23865] ffffc9000c309f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.770953][T23865] ffffc9000c309f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.779470][T23865] >ffffc9000c30a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1029.787552][T23865] ^ [ 1029.791630][T23865] ffffc9000c30a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1029.799719][T23865] ffffc9000c30a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1029.807808][T23865] ================================================================== [ 1029.850037][T23865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1029.857454][T23865] CPU: 0 UID: 0 PID: 23865 Comm: vivid-000-vid-c Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 1029.870803][T23865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.881073][T23865] Call Trace: [ 1029.884416][T23865] [ 1029.887366][T23865] dump_stack_lvl+0x99/0x250 [ 1029.891987][T23865] ? __asan_memcpy+0x40/0x70 [ 1029.896665][T23865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.901900][T23865] ? __pfx__printk+0x10/0x10 [ 1029.906529][T23865] panic+0x2db/0x790 [ 1029.910460][T23865] ? __pfx_panic+0x10/0x10 [ 1029.914899][T23865] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1029.920819][T23865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1029.927194][T23865] ? print_memory_metadata+0x314/0x400 [ 1029.932699][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.938371][T23865] check_panic_on_warn+0x89/0xb0 [ 1029.943358][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.949028][T23865] end_report+0x78/0x160 [ 1029.953309][T23865] kasan_report+0x129/0x150 [ 1029.957861][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.963541][T23865] kasan_check_range+0x2b0/0x2c0 [ 1029.968567][T23865] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.974233][T23865] __asan_memcpy+0x40/0x70 [ 1029.978758][T23865] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1029.984281][T23865] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1029.990049][T23865] ? ktime_get+0x3e/0x1f0 [ 1029.994403][T23865] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1030.000593][T23865] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.005822][T23865] vivid_thread_vid_cap+0x8da/0x10d0 [ 1030.011143][T23865] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1030.016892][T23865] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1030.022812][T23865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1030.029253][T23865] ? __kthread_parkme+0x7b/0x200 [ 1030.034226][T23865] ? __kthread_parkme+0x1a1/0x200 [ 1030.039274][T23865] kthread+0x70e/0x8a0 [ 1030.043403][T23865] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1030.049595][T23865] ? __pfx_kthread+0x10/0x10 [ 1030.054219][T23865] ? _raw_spin_unlock_irq+0x23/0x50 [ 1030.059443][T23865] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.064671][T23865] ? __pfx_kthread+0x10/0x10 [ 1030.069288][T23865] ret_from_fork+0x3f9/0x770 [ 1030.073909][T23865] ? __pfx_ret_from_fork+0x10/0x10 [ 1030.079048][T23865] ? __switch_to_asm+0x39/0x70 [ 1030.084007][T23865] ? __switch_to_asm+0x33/0x70 [ 1030.088791][T23865] ? __pfx_kthread+0x10/0x10 [ 1030.093410][T23865] ret_from_fork_asm+0x1a/0x30 [ 1030.098210][T23865] [ 1030.101579][T23865] Kernel Offset: disabled [ 1030.105932][T23865] Rebooting in 86400 seconds..